Hi, I am implementing a Windows Server 2008 R2 PKI Infrastructure. My design is an offline root CA (Workgroup) and 2 Intermediate Servers. How should I design my 2 Intermediate Servers? At the moment they are both installed but only server1 has any templates. If I was to use Basic EFS template for example and publish the template on both servers. Would it distribute certs from both servers? What is the best practice for my scenario? IJWRIGHTY

Hi, Please read the following article for reference: Designing and Implementing a PKI: Part I Design and Planning http://blogs.technet.com/b/askds/archive/2009/09/01/designing-and-implementing-a-pki-part-i-design-and-planning.aspx Hope this helps! Best Regards Elytis ChengElytis Cheng TechNet Community Support

Hi, Please read the following article for reference: Designing and Implementing a PKI: Part I Design and Planning http://blogs.technet.com/b/askds/archive/2009/09/01/designing-and-implementing-a-pki-part-i-design-and-planning.aspx Hope this helps! Best Regards Elytis ChengElytis Cheng TechNet Community Support