Chapter 6. Implementing a CA Hierarchy

Once you’ve designed your CA hierarchy, it’s time to install a certification authority (CA) hierarchy that follows the design. Implementation of a CA hierarchy always begins at the root CA and proceeds to the direct subordinates of the root CA. The process continues until all CAs in the hierarchy are installed.

This chapter provides detailed instructions for installing a CA hierarchy. The instructions can be used to build a hierarchy with a single CA or a hierarchy with two or more tiers.

The first section, CA Configuration Files, is applicable to all CA hierarchy designs because it introduces the configuration and script files essential to ensuring that the CAs in your hierarchy are configured correctly. By ...

Get Windows Server® 2008 PKI and Certificate Security now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.