I had a windows 2003 domain controller fail. The power supply went and took averything with it. Luckily, I have 2 other domain controllers. The only sticking point is that the server that failed was the certificate authority. I do not plan on replacing the server. Do I need to have a certificate authority? What will happen if I don't replace it?
You need a certificate authority if you do certificate-based authentication.
Most commonly, this is done for 802.1X compliant network access protection, such as "enterprise-WPA/2" encryption on wireless networks. You may also use CAs for your WSUS server, or to issue SSL/HTTPS certs to internal "websites" or services, or any number of other things. Therefore, the safest approach to figuring out if you need a CA is probably going to be to check the certificate stores on some client machines, and see if your CA actually issued any certificates for anything that's still in use. (It's an
If you don't use certificate-bases security, though, you don't need a Certificate Authority, simple as that.