2
votes
1answer
66 views

When installing a Windows sub CA from an offline root, how do I “recreate” it w/o reinstalling?

I have an offline root and am trying to constrain it using the EKUs so it doesn't have all application policies. Most of this is trial and error and I"d like to make this more efficient rather than ...
2
votes
1answer
150 views

Multiple CA's on Windows Server 2012

Is it possible to create multiple Certficate Authorities in Windows Server 2012? Specifically: I'd like to create a standalone root CA which will have its private key in offline secure storage. The ...
1
vote
1answer
1k views

Create and use intermediate certificate authority on Windows Server 2012?

Background: Server OS is Windows Server 2012. GUI is installed as we come upto speed with powershell. Setup is staging, not production (yet). We have our (internal, domain limited) Root CA installed. ...