Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We are using Hyper-V replication on Windows Server 2012+ outside Active Directory, so we are using SSL certificates issued by our own internal CA.

When setting up replication, I made sure that both the source host and the replica server had access to the CA server.

However in normal operation due to our network topology, the Hyper-V hosts have no access to the CA server.

This seems to work fine, but I'm wondering whether the Hyper-V hosts will ever need to access the CA server again to check for revoked certificates.

share|improve this question
add comment

1 Answer 1

Yes, they do - but failure to access the CA will just mean no updated revocation list. I.e. certificates will still be accepted.

Still, obvsiously have a not really good (as in: total crap) network achitecture and the hyper-v hosts should be able to access the ca.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.