Stand Alone Root CA

• A stand alone root CA is a certificate server at the root of a nonenterprise hierarchy.
  • It is the most trusted CA in its hierarchy.
  • It may or may not be a member of a domain.
  • It does not need access to Active Directory service.
  • However, it will use Active Directory if it exists for publishing certificates and certificate revocation lists.

• Because a stand alone root CA does not require Active Directory, it can easily be disconnected from the network and placed in a secure area.
  • This is useful when creating a secure offline root CA.

What is a stand alone subordinate CA?

---

---

© 2006 John Michael Pierobon

Notes