Deploying an Enterprise Root Certificate Authority

A certificate server provides a trusted authority to confirm a private key user’s identity. A domain normally has a hierarchy of certificate servers. An Enterprise root Certificate Authority (CA) grants itself a certificate and creates subordinate CAs. The root CA gives the subordinate CAs their certificates, but the subordinate CAs can grant certificates to users.
A domain needs an Enterprise CA to let clients request certificates, such as an Encrypting File System (EFS) recovery certificate.