09. Install and Configure Enterprise Subordinate Root CA Part-2

Video Series on Deploying Two-Tier Public Key Infrastructure in Windows Server 2019:
Part-4: In the fourth part of this six part video series on how to deploy a Two-Tier Public Key Infrastructure, we will see the steps to verify the health of Enterprise Subordinate Certificate Authority using Enterprise PKI tool in Windows Server 2019. We will also verify that CDP and AIA locations are properly publish and accessible to clients.
Link to see the next video on How to Install and Configure the OCSP Responder Role service on Windows Server 2019:
• 10. Install and Confi...
This Video series is based on Technet Guide on Windows Server 2008:
social.technet...
Full Playlist:
yt.vu/p/PLUZTRm...
Follow my blogs:
msftwebcast.bl...

[@muzzybehning]

Thank you! I knew the process but always kept getting the errors on my ROOT about CRT/CRL not being available. You helped me! Great, thanks a million!

[@MSFTWebCast]

Great to hear!

[@rceliberti]

These videos are very good and I thank you for it. I will save this to use many times.

[@markpeacock3783]

Life Saver. Great Video.

[@rajamanigandan]

Very useful video.

[@sammysame]

Great video, thanks for making and sharing - One Question @6:14 your screen shows DeltaCRL Locations. I don't; think that was covered by any of the videos you made.

[@lahirunimnajith3519]

thank you brother

[@xof3267]

Variables are not automatically computed (? not sure the word you used in the video at 02:55).

[@xof3267]

Missin my first message, with 'Hello... And a VERY happy new year'. Well, my problem was because of copy&paste the variable from the example instead of insert them by the "console way". Thx for your nice tutos & shares. Cheers :)

[@MSFTWebCast]

Happy New year too.

[@pratyusajena257]

@msft webcast, as per my understanding, we can follow almost the same steps in migration also. do you have content for that?

[@prabu101]

Thank you

[@hariclassic8235]

The CDP and AIA http locations are not getting updated its own with no errors. What could be problem?

[@fbifido2]

@8:40 - can you now undo the enabled @5:45 ????
Do you have a secure my ADCS RootCA & EnterpriseCA video ???

[@paulle3134]

Hi @msft, so nice and untestable video. Can you explain how can I add another issuer server? My company is asking me this configuration with two issuers. Many thanks. Cheers

[@MSFTWebCast]

I have never tested it but Yes, it is possible to have two sub-ordinate CA's. Generally it is used for high availability. For that you need to have a common CDP and AIA location.

[@sumitkarmakar1236]

as per the guidance , my ldap path is showing unable to download .. kindly suggest ..

[@user-db5lq5bw3p]

Thank you, Sir! the "DeltaCRL location#1/2" didn't show in pkiview, what's possible problem caused?

[@subhrojeetmukherjee8030]

check if the delta crl name suffix is been added in the cdp extension

[@LakshmiNarayanaRao.V]

Hello Could you please make an video to create Subordinate certificate renewal process and OCSP renewal process. Its not available anywhere in internet.

[@MSFTWebCast]

Frankly speaking, even i dont have any idea about that. But still will give it a try.

[@LakshmiNarayanaRao.V]

@@MSFTWebCast Thanks for your response, But renewing Subordinate and ocsp certificate using templates we can do. But I never got that chance.

[@MSFTWebCast]

@@LakshmiNarayanaRao.V same goes here.

[@LakshmiNarayanaRao.V]

@@MSFTWebCast Thanks for your prompt response. Just give a try lets see how it works.

[@ahmedsaad-lk2og]

okk