Moreover, another question please if I don't bother you. Regarding this matter of AD CS deployment, I read everywhere that you should deploy as the root CA a standalone CA in a workgroup machine. Then an enterprise subordinate CA. The former has to be kept off all the time, while the subordinate that's the one that enrolls the certificates. What do you think about this aspect?
@@mrugendranarwade1029 @lanstack i had the same problem. i supposed that you are doing everything in the same server and if its the case you need to add domain controller in the security and check the enrollment and autoenrollment when you create the template (6:27)
