How to determine Role on a installed CA?

Once a Certificate Authority is installed how does one
determine if it has been installed an Enterprise Root CA,
Enterprise Subordinate CA, Stand-alone Root CA or a
Stand-alone Subordinate CA?

I have tried looking at Properties, etc, but just cant
tell!!

Any help appreciated.

Thanks,

Chandru

Hi,

There are few things you can check.

First thing, is computer member of domain? If it is not then you can be 100%
sure that it is standalone setup of CA.
If computer is member of domain then it is possible that CA is either
standalone or enterprise CA. In CA MMC check if you can see "Certificate
Templates" container. If you do you can be 100% sure you have Enterprise
setup of CA. You could also check AD for information on CA (open Active
Directory Sites and Services -> Services -> Public Key Services ->
etc...)...

http://freeweb.siol.net/mpihler/entca.jpg
http://freeweb.siol.net/mpihler/ad-ent.jpg

To see if it is subordinate or root, check your CA certificate...
Name in the certificate will correspond to name of CA service (not name of
computer where CA is running). If the name is on the top them it is Root.
Anything else is subordinate...

http://freeweb.siol.net/mpihler/root.jpg

I hope it helps,

Mike

"Chandru Aroor" <(E-Mail Removed)> wrote in message
news:205401c4a8d2$10738060$(E-Mail Removed)...
> Once a Certificate Authority is installed how does one
> determine if it has been installed an Enterprise Root CA,
> Enterprise Subordinate CA, Stand-alone Root CA or a
> Stand-alone Subordinate CA?
>
> I have tried looking at Properties, etc, but just cant
> tell!!
>
> Any help appreciated.
>
> Thanks,
>
> Chandru
>
>