Can you have 2 certification authority on 1 AD (2 servers)?

Question

Szymon Rabiza 101

Can you have 2 certification authority on 1 AD (2 servers) or no?

Anonymous

2021-07-08T07:28:07.667+00:00

Hello @Szymon Rabiza ,
I'm just following up to make sure you received my last reply and that my answers properly address your questions. If you have any further questions or concerns about this post, please let us know.

Best Regards,
Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Mike Schaffer 1 Reputation point

2022-11-04T19:06:11.36+00:00

Hello Daisy Zhou - does this procedure- https://social.technet.microsoft.com/wiki/contents/articles/15037.ad-cs-step-by-step-guide-two-tier-pki-hierarchy-deployment.aspx apply to Active directory 2012 and 2016 functional levels as well? The reason I ask is that it is an older article based on 2008 R2 technology. Thanks in advance for your answer.

Accepted answer

0 additional answers

Anonymous

2021-07-08T07:28:07.667+00:00

Hello @Szymon Rabiza ,
I'm just following up to make sure you received my last reply and that my answers properly address your questions. If you have any further questions or concerns about this post, please let us know.

Best Regards,
Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Mike Schaffer 1 Reputation point

2022-11-04T19:06:11.36+00:00

Hello Daisy Zhou - does this procedure- https://social.technet.microsoft.com/wiki/contents/articles/15037.ad-cs-step-by-step-guide-two-tier-pki-hierarchy-deployment.aspx apply to Active directory 2012 and 2016 functional levels as well? The reason I ask is that it is an older article based on 2008 R2 technology. Thanks in advance for your answer.

Answer 1

Thank you for posting here.

Q: Can you have 2 certification authority on 1 AD (2 servers) or no?
A: Yes, you can have 2 certification authority on 1 AD (2 servers).

For one-tier PKI:

You can have two one-tier CA servers (two different online Enterprise root CA servers) in one AD domain.

For two-tier PKI:

You can have one two-tier PKI in one AD domain.

Two-tier PKI with one offline Standalone root CA server and one online Enterprise subordinate CA server.
AD CS Step by Step Guide: Two Tier PKI Hierarchy Deployment
https://social.technet.microsoft.com/wiki/contents/articles/15037.ad-cs-step-by-step-guide-two-tier-pki-hierarchy-deployment.aspx

Or two-tier PKI with one online Enterprise root CA server and one online Enterprise subordinate CA server.

Hope the information above is helpful.

Should you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.