IIS Server Security - how to separate PKI web enrollment with CA functionality

Author

how to separate PKI web enrollment with CA functionality

Elia

2005-06-13, 2:48 am

Hi to all,

I want to install CA and RA (web enrllonment) components on two different
machines running win server 2003. Does anyone know if it is possible? I
haven't located any documentation on this so far.

Also, if it is possible to separate the two components and the CA is
offline, can I use a device i.e. memory stick to transfer the requests from
RA to CA in order to issue the certificates? At the moment I have a testbed
with both components on the same machine. I noticed that when you use the web
interface to request a certificate, the request automatically appears at the
certificate manager to process the request.

Any feedback is welcomed.

Thank you in advance.