Is it possible to create multiple Certficate Authorities in Windows Server 2012? Specifically: I'd like to create a standalone root CA which will have its private key in offline secure storage. The main issuing (Enterprise) CA should have a certificate signed by the root CA.
Is this possible with just 1 Windows Server 2012 installation or do you really need to create multiple VM's with one CA each?