Using Subordinate CA

[Scotty]

Archived from groups: microsoft.public.win2000.security (More info?)

At one of my locations I have both the Enterprise Root CA and an Enterprise
Sub CA. When I request a certificate from my desktop using the MMC snap-in
it requests it from the Root CA instead of the Sub CA. How can I force the
computer to request certificates from the Sub CA instead?

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Go to CA admin for Root and delete all templates but Subordinate CA. Root CA
should ojnly isse a certificate for sub CAs while Sub CAs should only issue
certs to end devices.
Vladimir

"Scotty" wrote:

> At one of my locations I have both the Enterprise Root CA and an Enterprise
> Sub CA. When I request a certificate from my desktop using the MMC snap-in
> it requests it from the Root CA instead of the Sub CA. How can I force the
> computer to request certificates from the Sub CA instead?