Comparison between stand-alone CA and enterprise CA

Comparison between stand-alone CA and enterprise CA

Rating:

Enterprise and stand-alone certificate authorities (CAs) are part of a public-key infrastructure (PKI). Comparisons between these two types of CAs are given below:

• Enterprise CAs are tied to Active Directory and are required to use it.


• Enterprise CAs use Kerberos or NTLM authentication to validate users and computers before certificates are issued.


• Enterprise CAs use templates to issue every type of certificate.


• Enterprise CAs are more difficult to maintain, and administrators require more in-depth knowledge about Active Directory.


• Stand-alone CAs store their information locally. No request for certificate enrollment is responded automatically. Requests wait in a queue for an administrator to manually approve or deny them.

Rating: