I want to deploy CAs internally within my domain, but I need to make sure that I can do this and provide fault tolerance if something happens to one of them, or if I need to perform maintenance. I'm having toruble finding documentation on this, but I'm wondering what is required for high availability with CAs. We're using Win 2008 R2. Thanks.

If you want high availability, you would deploy the CA as a cluster. All other options, (such as deploying multiple CAs) just provide redundant enrollment services, but do not allow for recovery in the event of a single node failure Brian

Additional links: http://technet.microsoft.com/en-us/library/cc742450(WS.10).aspx http://www.microsoft.com/downloads/details.aspx?FamilyID=15c75333-be26-4955-a32c-03077daf1631&DisplayLang=enhttp://en-us.sysadmins.lv

Thank you. I went ahead and just deployed multiple intermediate CAs.