Redundant Subordinate/Issuing CA, How is the load balanced?redundant openvpn configurationCertificate Authority issuing Basic EFS certificates without AutoenrollIssuing client certificates to customersShared PHP Sessions in Load Balanced httpd environmentMicrosoft offline root CA CDP and AIA http URLs are hard coded - trouble ahead?Redundant Debian GatewayAdd issuing CA to online root CA windows 2008 r2Windows 2008 Cert Authority only issuing certificates for 10 daysstrongSwan VPN Intermediate Certificate AuthorityBest approach to tier 2 PKI with multiple subordinates with ADCS

What's the point of deactivating Num Lock on login screens?

SSH "lag" in LAN on some machines, mixed distros

How can saying a song's name be a copyright violation?

Reserved de-dupe rules

Brothers & sisters

How to say in German "enjoying home comforts"

Assassin's bullet with mercury

Why is consensus so controversial in Britain?

What is the word for reserving something for yourself before others do?

Has there ever been an airliner design involving reducing generator load by installing solar panels?

Is it canonical bit space?

Is "remove commented out code" correct English?

Facing a paradox: Earnshaw's theorem in one dimension

Does a druid starting with a bow start with no arrows?

Neighboring nodes in the network

Does casting Light, or a similar spell, have any effect when the caster is swallowed by a monster?

Emailing HOD to enhance faculty application

Can I use a neutral wire from another outlet to repair a broken neutral?

Is there a hemisphere-neutral way of specifying a season?

Infinite Abelian subgroup of infinite non Abelian group example

Why does Kotter return in Welcome Back Kotter

Combinations of multiple lists

How to model explosives?

I Accidentally Deleted a Stock Terminal Theme



Redundant Subordinate/Issuing CA, How is the load balanced?


redundant openvpn configurationCertificate Authority issuing Basic EFS certificates without AutoenrollIssuing client certificates to customersShared PHP Sessions in Load Balanced httpd environmentMicrosoft offline root CA CDP and AIA http URLs are hard coded - trouble ahead?Redundant Debian GatewayAdd issuing CA to online root CA windows 2008 r2Windows 2008 Cert Authority only issuing certificates for 10 daysstrongSwan VPN Intermediate Certificate AuthorityBest approach to tier 2 PKI with multiple subordinates with ADCS






.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;








0















I'm tasked with implementing a 2 tier PKI (ADCS) with 2 subordinate CA's to provide high availabilty. Now I am wondering if I have 2 suborindates with the same certificate templates active, how will be determined what CA will handle requests. (No load balancers present)



Can I expect an even flow or will 1 CA be used most of the time?



The PKI will be built with Windows Server 2019






high-availability certificate-authority windows-server-2019







share|improve this question






















  • How will you be issuing the certificates? Auto enrollment? Web registration?

    – Lenniey
    2 days ago











  • Hello, this depends on the certificates. Common certificates will be issued with auto enrollment, however the web enrollment roll will also be setup so It can be used if it where needed. Further more the certificate enrollement wizard wil also be used as a more safe way to add SAN names to web server certificates, as apposed to enabling the flag so this can be done in web enrollment.

    – kevin rennenberg
    2 days ago

















0















I'm tasked with implementing a 2 tier PKI (ADCS) with 2 subordinate CA's to provide high availabilty. Now I am wondering if I have 2 suborindates with the same certificate templates active, how will be determined what CA will handle requests. (No load balancers present)



Can I expect an even flow or will 1 CA be used most of the time?



The PKI will be built with Windows Server 2019






high-availability certificate-authority windows-server-2019







share|improve this question






















  • How will you be issuing the certificates? Auto enrollment? Web registration?

    – Lenniey
    2 days ago











  • Hello, this depends on the certificates. Common certificates will be issued with auto enrollment, however the web enrollment roll will also be setup so It can be used if it where needed. Further more the certificate enrollement wizard wil also be used as a more safe way to add SAN names to web server certificates, as apposed to enabling the flag so this can be done in web enrollment.

    – kevin rennenberg
    2 days ago













0












0








0








I'm tasked with implementing a 2 tier PKI (ADCS) with 2 subordinate CA's to provide high availabilty. Now I am wondering if I have 2 suborindates with the same certificate templates active, how will be determined what CA will handle requests. (No load balancers present)



Can I expect an even flow or will 1 CA be used most of the time?



The PKI will be built with Windows Server 2019






high-availability certificate-authority windows-server-2019







share|improve this question














I'm tasked with implementing a 2 tier PKI (ADCS) with 2 subordinate CA's to provide high availabilty. Now I am wondering if I have 2 suborindates with the same certificate templates active, how will be determined what CA will handle requests. (No load balancers present)



Can I expect an even flow or will 1 CA be used most of the time?



The PKI will be built with Windows Server 2019






high-availability certificate-authority windows-server-2019




high-availability certificate-authority windows-server-2019






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked 2 days ago









kevin rennenbergkevin rennenberg

294




294












  • How will you be issuing the certificates? Auto enrollment? Web registration?

    – Lenniey
    2 days ago











  • Hello, this depends on the certificates. Common certificates will be issued with auto enrollment, however the web enrollment roll will also be setup so It can be used if it where needed. Further more the certificate enrollement wizard wil also be used as a more safe way to add SAN names to web server certificates, as apposed to enabling the flag so this can be done in web enrollment.

    – kevin rennenberg
    2 days ago

















  • How will you be issuing the certificates? Auto enrollment? Web registration?

    – Lenniey
    2 days ago











  • Hello, this depends on the certificates. Common certificates will be issued with auto enrollment, however the web enrollment roll will also be setup so It can be used if it where needed. Further more the certificate enrollement wizard wil also be used as a more safe way to add SAN names to web server certificates, as apposed to enabling the flag so this can be done in web enrollment.

    – kevin rennenberg
    2 days ago
















How will you be issuing the certificates? Auto enrollment? Web registration?

– Lenniey
2 days ago





How will you be issuing the certificates? Auto enrollment? Web registration?

– Lenniey
2 days ago













Hello, this depends on the certificates. Common certificates will be issued with auto enrollment, however the web enrollment roll will also be setup so It can be used if it where needed. Further more the certificate enrollement wizard wil also be used as a more safe way to add SAN names to web server certificates, as apposed to enabling the flag so this can be done in web enrollment.

– kevin rennenberg
2 days ago





Hello, this depends on the certificates. Common certificates will be issued with auto enrollment, however the web enrollment roll will also be setup so It can be used if it where needed. Further more the certificate enrollement wizard wil also be used as a more safe way to add SAN names to web server certificates, as apposed to enabling the flag so this can be done in web enrollment.

– kevin rennenberg
2 days ago










1 Answer
1






active

oldest

votes


















1














[MS-WCCE] conforming clients (Windows and some 3rd party tools for other operating systems) select CA randomly. If you have two CAs with the same set of assigned certificate templates, both will have equal chances to get contacted by clients. If client is site-aware, the closest to client CA will be contacted, otherwise, random CA is selected.






share|improve this answer























  • Thank you very much!

    – kevin rennenberg
    14 hours ago











Your Answer








StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);













draft saved

draft discarded


















StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f961061%2fredundant-subordinate-issuing-ca-how-is-the-load-balanced%23new-answer', 'question_page');

);

Post as a guest















Required, but never shown

























1 Answer
1






active

oldest

votes








1 Answer
1






active

oldest

votes









active

oldest

votes






active

oldest

votes









1














[MS-WCCE] conforming clients (Windows and some 3rd party tools for other operating systems) select CA randomly. If you have two CAs with the same set of assigned certificate templates, both will have equal chances to get contacted by clients. If client is site-aware, the closest to client CA will be contacted, otherwise, random CA is selected.






share|improve this answer























  • Thank you very much!

    – kevin rennenberg
    14 hours ago















1














[MS-WCCE] conforming clients (Windows and some 3rd party tools for other operating systems) select CA randomly. If you have two CAs with the same set of assigned certificate templates, both will have equal chances to get contacted by clients. If client is site-aware, the closest to client CA will be contacted, otherwise, random CA is selected.






share|improve this answer























  • Thank you very much!

    – kevin rennenberg
    14 hours ago













1












1








1







[MS-WCCE] conforming clients (Windows and some 3rd party tools for other operating systems) select CA randomly. If you have two CAs with the same set of assigned certificate templates, both will have equal chances to get contacted by clients. If client is site-aware, the closest to client CA will be contacted, otherwise, random CA is selected.






share|improve this answer













[MS-WCCE] conforming clients (Windows and some 3rd party tools for other operating systems) select CA randomly. If you have two CAs with the same set of assigned certificate templates, both will have equal chances to get contacted by clients. If client is site-aware, the closest to client CA will be contacted, otherwise, random CA is selected.







share|improve this answer












share|improve this answer



share|improve this answer










answered 2 days ago









Crypt32Crypt32

3,5771925




3,5771925












  • Thank you very much!

    – kevin rennenberg
    14 hours ago

















  • Thank you very much!

    – kevin rennenberg
    14 hours ago
















Thank you very much!

– kevin rennenberg
14 hours ago





Thank you very much!

– kevin rennenberg
14 hours ago

















draft saved

draft discarded
















































Thanks for contributing an answer to Server Fault!


  • Please be sure to answer the question. Provide details and share your research!

But avoid …


  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.

To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f961061%2fredundant-subordinate-issuing-ca-how-is-the-load-balanced%23new-answer', 'question_page');

);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







-

Popular posts from this blog

How to write a 12-bar blues melodyI-IV-V blues progressionHow to play the bridges in a standard blues progressionHow does Gdim7 fit in C# minor?question on a certain chord progressionMusicology of Melody12 bar blues, spread rhythm: alternative to 6th chord to avoid finger stretchChord progressions/ Root key/ MelodiesHow to put chords (POP-EDM) under a given lead vocal melody (starting from a good knowledge in music theory)Are there “rules” for improvising with the minor pentatonic scale over 12-bar shuffle?Confusion about blues scale and chords

Image
Why is a set not a partition of itself? Would an 8% reduction in drag outweigh the weight addition from this custom CFD-tested winglet? Labeling matrices/rectangles and drawing Sigma inside rectangle Unexpected Netflix account registered to my Gmail address - any way it could be a hack attempt? 51% attack - apparently very easy? refering to CZ's "rollback btc chain" - How to make sure such corruptible scenario can never happen so easily? Missouri raptors have wild hairdos Can someone explain homicide-related death rates? Why is tomato paste so cheap? What are the implications of the new alleged key recovery attack preprint on SIMON? Effects of ~10atm pressure on engine design Is taking modulus on both sides of an equation valid? Jumping frame contents with beamer and pgfplots Are there any established rules for splitting books into parts, chapters, sections etc? Anatomically Correct Carnivorous Tree Why do I get two different answers when solvi...
Read more

What if the end-user didn't have the required library?What is setup.py?What is a clean, pythonic way to have multiple constructors in Python?What does Ruby have that Python doesn't, and vice versa?What is the reason for having '//' in Python?How do I create a namespace package in Python?How to package shared objects that python modules depend on?setuptools vs. distutils: why is distutils still a thing?Navigation in Windows 10 vs code not going to virtualenv library when the same library is installed at user levelPython create package for local usePackaging a project that uses multiple python versionsWhy is permission denied on pip install except for when “--user” is included at end of command?

Image
Can a tourist shoot a gun in the USA? Will a coyote attack my dog on a leash while I'm on a hiking trail? Labeling matrices/rectangles and drawing Sigma inside rectangle How can I answer high-school writing prompts without sounding weird and fake? Is there ever any indication in the MCU as to how Spider-Man got his powers? Jumping frame contents with beamer and pgfplots Would an 8% reduction in drag outweigh the weight addition from this custom CFD-tested winglet? Is it possible to create different colors in rocket exhaust? German characters on US-International keyboard layout Does gravity affect the time evolution of a QM wave function? 51% attack - apparently very easy? refering to CZ's "rollback btc chain" - How to make sure such corruptible scenario can never happen so easily? Why are solar panels kept tilted? Is Germany still exporting arms to countries involved in Yemen? Unexpected Netflix account registered to my Gmail address - any wa...
Read more

Why did Thanos need his ship to help him in the battle scene?Which actor plays Thanos in the Avengers mid-credits scene?Are there economic implications portrayed in comics where the buildings and cities are ruined almost daily?Old X-Men comic where team travels to alien world with a ring-like sun that needs recharging?Why does Ego need help sleeping?Is there an objective answer to who “the strongest Avenger” is?How did Banner get unstuck?Why did Thanos get hit?How did Thanos (or anyone) know the Infinity Stones would give him this power?Did Thanos leave Eitri alive for his after-sales service?In Avengers 1, why does Thanos need Loki?

Image
German characters on US-International keyboard layout Why is tomato paste so cheap? what does a native speaker say when he wanted to leave his work? Can a tourist shoot a gun in the USA? Extracting sublists that contain similar elements Why does the headset man not get on the tractor? What kind of SATA connector is this? Help in identifying a mystery wall socket Unexpected Netflix account registered to my Gmail address - any way it could be a hack attempt? Anatomically Correct Carnivorous Tree declared variable inside void setup is forgotten in void loop What is the largest number of identical satellites launched together? Automatically anti-predictably assemble an alliterative aria What information do scammers need to withdraw money from an account? Rounding a number extracted by jq to limit the decimal points Tikz draw contour without some edges, and fill What should a student do when they are the victim of a FERPA violation? How exactly does artific...
Read more