PKI infrastructure for EAP-TLS wireless security solution

[Bill F]

I've been reading documentation for the MS Wireless Security Solution.
Specifically the design and build guides

http://www.microsoft.com/downloads/...b3-010b-47e7-b234-a27cda291dad&displaylang=en

The network I'm working in is one domain in a corporate AD forest. We
don't have enterprise admin rights so we can't install an Enterprise CA.
Our only option is a stand-alone server.

Two questions.
1) What is the difference between an Enterprise and Stand-alone server
if the stand-alone server is actually connected to the network? Are
there any pro's or cons to putting it in an AD domain as opposed to an
NT domain that interfaces with AD?

2) Can I setup a CA server that functions as both roor and issuing CA?

Thanks

 

[Richard Sweetnam]

A simple question for a complex answer

I reccomend the following white paper to help explain the diffent roles fo
certificate servers

http://www.microsoft.com/windows2000/techinfo/howitworks/security/windows2000csoverview.asp

Servers can be root and issuing - it's just not reccomended.


Hope this helps,
Richard