Setting up a PKI

Now we have finished the theory part of this chapter and are moving on to the deployment part. In this section, I am going to demonstrate how we can set up a PKI using the two-tier model. I have used this model as it is the most commonly used model for medium and large organizations:

The preceding diagram explains the setup I am going to configure. In it, I have one domain controller, one standalone root CA, and one issuing CA. All are running with Windows Server 2016 with the latest patch level.

Setting up a standalone root CA

The first step is to set up the standalone root CA. This is not a domain member server, and is operating on the workgroup level. Configuring it on a separate VLAN will add additional...