I'm trying to set up a trust between 2 untrusting forests, and I'd like to use either a cross-certificate or Bridge CA solution (not using AD trusts or CEP). I've found loads of advice saying that this can be done, but I can find anything on how to actually do it.
(pics don't appear to be showing - here they are in a Google slides:3 pics from below)
Having drawn these pictures I can see I'm missing something in that I can't see how or where the cross certification link would be stored.
So far I've completely failed to make one CA sign anything (certificate, CA, req) originating from another CA's hierarchy. Am I going about this the right way? Any pointers as to how to cross sign anything, or whether my diagrams are correct would be great. I'm sorry this is a bit vague, but I'm really not sure which way to go here.