Installing an Enterprise Root CA

[plexer]

I know it's not good practice to install a Root CA on a domain controller but that's my most reliable server which I intend to keep around for a long time yet so is there any real reason not to do it?

 

Ben

[ChrisH]

I really don't see any reason not to. Even if you don't want it as a DC any more you can just demote it. I plan to have mine as on a new DC eventually. The only real argument is security and offline root CAs but I think we will get by without that level of security and just have it on a domain joined, always on server.

[plexer]

Yeah I don't intend to go for an offline root.

 

Ben