resilient CA servers

[rchester]

How can I make a resilient Microsoft CA server solution?

Are the private keys able to be exchanged from one CA machine to another?

Also, if I set up a CA root server and a subordinate CA server can a device do a crl check on either machine?

Where is a good reference for this sort of research?

[lisa.hall]

I couldn’t find anything at www.microsoft.com/support but it couldn’t hurt to open a case with them. Come back and let us know what you find out.