Standalone vs Enterprise root CA security.

[Guest Gunna]

I have a Root and a subordinate stnadalone CA in my enterprise. I also have

a 3rd subordinate which is issuing certificates from the 2nd subordinate

which has been setup as an Enterpise subordinate. I was told that the Root

and the 1st subordinate where setup as Standalone for security reasons but no

one can tell me those reaosns. Can anyone tell me the difference in security

between these.

[Guest Brian Komar \(MVP\)]

See the best practices whitepaper available at www.microsoft.com/pki

Brian

 

"Gunna" <Gunna@discussions.microsoft.com> wrote in message

news:F9DC410E-BC53-4704-A422-30C0BA3EC00A@microsoft.com...<span style="color:blue">

>I have a Root and a subordinate stnadalone CA in my enterprise. I also

>have

> a 3rd subordinate which is issuing certificates from the 2nd subordinate

> which has been setup as an Enterpise subordinate. I was told that the

> Root

> and the 1st subordinate where setup as Standalone for security reasons but

> no

> one can tell me those reaosns. Can anyone tell me the difference in

> security

> between these. </span>