Hi I have some questions regarding the ADCS clustering configuration. I did read through the Microsoft documentation of how to set up the CA cluster. Please find my questions for the below scenario: CA1 - Site A - for SSL certificates CA2 - Site A - for device certificates (auto enrollment) CA3 - Site B - for SSL certificates CA4 - Site B - for device certificates (auto enrollment) I would like to set up CA1 & CA3 as first cluster AND CA2 & CA4 as second cluster. Questions: Can the common name for CA1 & CA3 be the same? I guess after the fail over cluster settings, the service name will be used for enrollment service object within AD. Since both CA1 & CA3 will have similar configurations, which one will issue the CRLs. Will clustering work for auto enrollment configurations? Thanks Sanurajan