Standalone Root CA - signing the CA certificate RRS feed

  • Question

  • Hi...

    How we can sign the sub-ca certificate from Standalone Root <g class="gr_ gr_80 gr-alert gr_gramm gr_inline_cards gr_run_anim Style multiReplace" data-gr-id="80" id="80">CA ?</g> Since it's standalone I can't use any templates.

    Thanks in Advance

    Sunday, March 17, 2019 12:02 PM

All replies

  • When you create the subordinate CA, a request is created and placed on C:\ unless directed to another location. If you don't have this request, you can create another on the Subordinate CA. 

    • Go to the CA MMC and create a new request - In the MMC this will be Renew CA Certificate...
    • Click Yes to create new keys and note where the request is saved.
    • Transport the request to your standalone root CA.
    • Open the CA MMC and submit the request. In Pending Requests click on the new request and select Issue.
    • Open Issued Certificates, open the new certificate and from the Details tab, select Copy to file…
    • Save the file as .p7b extension and transport back to Sub CA.
    • In the CA MMC, right-click on the CA object, All Tasks/Install CA Certificate
    • Browse to your new cert from the Root CA and open.
    • Wait a minute the start the CA service.
    • Right click on the CA object, select Properties to view the signed certificate.

    This is only to answer your specific question. Again, I suggest you first determine what happened to the request that would have been created when you set up the Subordinate CA.

    Hope that helps,



    Bill Stites - PKI Consultant

    PKI Solutions, Inc.

    Bill Stites, PKI Consultant at PKI Solutions, Inc, started in PKI at Providence Health & Services
    in the Pacific Northwest in 2006. He has since consulted in the design and implementation of PKIs
    and certificate management systems in retail, government and insurance organizations.
    He joined PKI Solutions in January 2019.

    Sunday, March 17, 2019 4:48 PM
  • Hi,

    Was your issue resolved?

    If you resolved it using our solution, please "mark it as answer" to help other community members find the helpful reply quickly.

    If you resolve it using your own solution, please share your experience and solution here. It will be very beneficial for other community members who have similar questions.

    If no, please reply and tell us the current situation in order to provide further help.

    Best Regards,


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact

    Wednesday, March 20, 2019 9:19 AM