Hi All,
I have a general question regarding ADCS Redundacy and High Availability on our another customer.
Our customers have a 2 Tier Windows Server 2008 R2 CA is 1 Stand Alone Root CA and 1 EnterpriseSubCA (issuer) at same site (DRC), now they want to implement1EnterprisesubCA (issuer) again on another site (DC) to HA/Redudancy Enterprise SubCA.I know that ADCS can be installed as aHAservice in a Failover Cluster in Windows Server 2008 R2. However, if there is not a need for that level of HA, will there be redundancy if 2 issuing CA`s are set up with the exact same certificate templates published?
- Is it possible & what steps should we prepare?
- I.e. will the Autoenrollment try the next available CA if the first one are unavailable?
Many thanks for your help.