New answers tagged

3

when the domain controllers automatically renew those certificates above, will they know to look at the subordinate CA for the renewal/issuance of a new certificate based on those templates required for a domain controller? yes. Enrollment clients will enumerate all CAs that support requested template from AD first. Then client will choose random CA from ...


1

You can use AWS Private CA, but it's very expensive. You can follow the AWS Getting Started Guide which uses a free "Easy RSA" CA, which is fairly easy. You'll want to be careful with this in production. From memory it gives you a shared certificate / key that multiple people use, which isn't good for security. For an enterprise you'll probably ...


Top 50 recent answers are included