Hi, I am implementing a Windows Server 2008 R2 PKI Infrastructure. My design is an offline root CA (Workgroup) and 2 Intermediate Servers. How should I design my 2 Intermediate Servers? At the moment they are both installed but only server1 has any templates. If I was to use Basic EFS template for example and publish the template on both servers. Would it distribute certs from both servers? What is the best practice for my scenario? IJWRIGHTY