Overview

The root CA server is the main CA server in any organization, and is the top of the PKI infrastructure. The root CA authenticates the subordinate CA server. This server is generally kept in offline mode to prevent any intrusion and to secure the private key.

To configure the root CA server, do the following:



1. Make sure that the root CA server is installed. For more information, see Installing the root CA server.



2. Configure the Certification Distribution Point and Authority Information Access settings. For more information, see Configuring the Certification Distribution Point and Authority Information Access settings.



3. Configure the CRL accessibility. For more information, see Configuring CRL accessibility.