The DOs and DON’Ts of PKI – Microsoft ADCS

DON’T install PKI without a detailed plan. Ask yourself what you need it for, what features will you use and would it be scalable enough in the future. DO use Windows Server Enterprise Edition for Active Directory users enrollment.



http://kazmierczak.eu/itblog/2012/08/22/the-dos-and-donts-of-pki-microsoft-adcs/

Hierarchies in PKI

A PKI hierarchy can have one or more tiers. In a single tier PKI environment your only CA server will be the Root CA. If you have more tiers your Root CA will issue subordinate CA certificates CA servers below the root.



http://networklore.com/hierarchies-in-pki/