I am currently in the planning phase of a two tier Windows PKI using this deployment guide, and I am stuck concerning the use of OCSP and the online responder role of ADCS.

The guide mandates that one of the servers act as the HTTP CDP/AIA location and be configured as an online responder with OCSP. This role requires the datacenter edition of Windows Server. This is not an option for me due to cost, and I am not sure how to argument the deployment. Do I have to cut out the HTTP CDP/AIA location altogether and rely solely on LDAP, or is there another way to configure it?

My experience with ADCS so far has been with simple, single-tier enterprise root CA's, so this has been a learning process.


Use Server 2012 Standard

The edition requirements for OCSP have been removed in Windows Server 2012.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.