Hi, When you add a second issuing CA in two-tier infrastructure, how does a client figure out which CA to contact to get his certificate ? We have user and computer certificates for wlan, and have one issuing CA, we are not looking at implementing another issuing CA so if one goes down the other will respond. There is not special configuration to have 2 issuing CA? we can just add another right ? /R Ole

Both clients and enterprise CAs works with certificate templates. Once a certificate template has been selected by the client for a certificate request, the enrollment process will search for an enterprise CA in AD that can issue the template. If more than one CA is found, the client will try each CA in the list in random order (for load balancing) until a CA responds and is able to issue a certificate. /Hasain