In this blog, I will describe the process of creating a Microsoft Root Certificate Authority – Standalone Offline CA. Introduction An Offline CA is required to authorize the Subordinate Server by issuing a Subordinate certificate to the Microsoft Enterprise CA, which will then issue the certificates to any entity that needs an SSL cert in the environment. Standalone Offline CA is not required to be up and running or connected to a network. In fact, it's a good security practice to have this...

In this blog, I will describe the process of creating an Microsoft Enterprise Certificate Authority – Subordinate CA. Introduction The Subordinate CA is authorized by the Enterprise Offline Root CA to issue the certificates. Unlike the Offline Root CA, the Subordinate CA is joined to the domain before configuring the Active Directory Certificate Services (AD CS). Step-by-Step instructions to install and configure the Offline CA can be found in my blog named “Install and Configure Microsoft...