You’re called in as a consultant to create a CA hierarchy for a company. The company has three locations: one in the United States, one in South America, and one in Europe.
Each location has approximately 1000 users who need certificates. About 75% of the users in each location are domain members running Windows 7 and Windows 8.1. The others are running a non-Windows OS and aren’t domain members.
Some features of the PKI should include the following:
Web enrollment Autoenrollment Smart card enrollment, in which designated users can enroll other users EFS Automatic key archival Network device certificates Real-time query for certificate revocation status.
1. Design the CA hierarchy, and label each CA according to its function and status (stand-alone, enterprise, root, intermediate, issuing, online, offline). The design should include a drawing showing the hierarchy as well as a detailed description, including how users and clients interact with the systems you selected.
2. In addition, list the role services that need to be installed and the certificate template types that must be configured.