http://blog.pdan.dev/tags/ca/ Recent content in CA on myblog Hugo en-US Sun, 01 May 2022 21:29:01 +0800 http://blog.pdan.dev/posts/windows-server-ca/ Sun, 01 May 2022 21:29:01 +0800 http://blog.pdan.dev/posts/windows-server-ca/ <p>In this Tutorial we’re going to configure a Two-Tier Enterprise PKI with Microsoft Server 2019 intended for Lab use. The advantage of a Two-Tier Enterprise PKI Hierarchy is that clients only trust the Root CA. So if a Subordinate server gets compromised the Root CA does not have to be replaced. During normal operation the Root CA will be offline and Certificate requests are handled by the Subordinate CA. The Root CA is a non-domain joined device and will only be turned on issue a certificate for the Subordinate CA or to update the Certificate Revocation List (CRL).</p>