Second server installation field, master, this is a domain which two are equal primary domain, it is encountering a problem, install the certificate services, the first domain host using CA root domain, then the second is to use CA root domain, domain hosts or subordinate CA? This don't understand, the use of a certificate of domain RADIUS, the purpose is to run a wireless authentication, for use in mobile devices connected!!!!! Consult!!!!!

CodePudding user response:

If two servers are root CA, what's the problem? Because domain master is equal, with a root CA, a subordinate CA, fear of the future use would have problems, do not understand

CodePudding user response:

The root CA can have more than one, but they are not redundant to each other, each hair,
Subordinate CA depends on the root CA,
Best practice is to build a separate root, use it to send a certificate to the root of the enterprise, and then the independent root shutdown under lock and key, then with enterprise certificate