Well, I have found some info, but would still appreciate some guidance. For example, when creating the offline Root CA, which Hash algorithm is usually preferred?

Getting involved in a project for a customer involving Windows PKI, SmartCards, RSA devices. I don't know much about installing and configuring a Windows CA (although I have done basic ones). Client wants an offline Root and then 1 Subordinate Online to service about 1600 Users. Can anyone point me in the right direction for installing and configuring this? Also, the client wants to know if these will be needed: Online Responder Services, Network Device Enrollment Services, Templates to be used (v1, v2, v3...?) Thanks,

Hi, Here is a useful Windows PKI library: Windows PKI documentation reference and library http://social.technet.microsoft.com/wiki/contents/articles/windows-pki-documentation-reference-and-library.aspx For design, implementation and configuration, please refer to this series of articles: Designing and Implementing a PKI: Part I Design and Planning http://blogs.technet.com/b/askds/archive/2009/09/01/designing-and-implementing-a-pki-part-i-design-and-planning.aspx Hope this helps. Regards, Bruce Forum Support Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.