Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We are using Hyper-V replication on Windows Server 2012+ outside Active Directory, so we are using SSL certificates issued by our own internal CA.

When setting up replication, I made sure that both the source host and the replica server had access to the CA server.

However in normal operation due to our network topology, the Hyper-V hosts have no access to the CA server.

This seems to work fine, but I'm wondering whether the Hyper-V hosts will ever need to access the CA server again to check for revoked certificates.

share|improve this question
up vote 1 down vote accepted

Yes, they do - but failure to access the CA will just mean no updated revocation list. I.e. certificates will still be accepted.

Still, obvsiously have a not really good (as in: total crap) network achitecture and the hyper-v hosts should be able to access the ca.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.