Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When you install a Windows forest CA you have the option to make it standalone or enterprise. I have an existing installation which I am assuming is standalone as it doesn't have a certificate templates folder when I load the management console.

However, I can't find anything that definitively says "This is a standalone CA", such as under an "About" option in the management console. For all I know this could be a malfunctioning enterprise CA. How do I definitively tell whether my CA is standalone or enterprise?


share|improve this question
What version of Windows? – Joe Doyle Jan 27 '10 at 0:35
up vote 2 down vote accepted

Does this thread help you? Looks like you were on the right track.

Quoting Jediah L. in the previously mentioned thread:

A Standalone will be a root CA that is not subordinated (contains a self-attested certificate), and is not integrated into active directory at all. If it's integrated into active directory you will be publishing the root CA information into active directory and using LDAP as publication and distribution points.

Looks like a lot of good things return with a Google search.

share|improve this answer

Either of the following methods should work:

  1. Run the certutil command:

    certutil -getreg ca\catype

    The output will tell you whether this is an Enterprise or Standalone CA: enter image description here

  2. Alternatively, you can check for the presence of the Certificate Templates node. If Certificate Templates is present, then this is an Enterprise CA (Standalone CA's don't use templates): enter image description here

(Link to Reference)

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.