Hi All, I have inherited a network that has a Root and Sub-ordinate CA installed. I have been trying to resolve tons of errors that are ocurring with these CA's and I am getting no where after weeks of troubleshooting. Therefore I want to remove these servers and start again! Is this a bad thing to do? What will the effects be on the netwrok? We are only using Certs for our Citrix Secure Access Gateway servers that I can see and we have issued these out manually as self signed certs. Will this be a problem? Many thanks for any help. Rob.

this depends on your environment and requirements. If you need certificates only for Citrix AG, you probably don't need certificate services at all. Instead of self-signed certificates I would advice to pruchase certificates from common commercial CA. This will allow users to connect to your SSL server without warning messages and reduce administrative effort on certificate management.My weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com

Thanks for the answer! We are possibly moving away from the Citrix AG anyway and using VPN clients. I may as you suggest consider removing the CA's altogether. reagrds, Rob