After the CA has been commissioned, I recommend that you use the Microsoft Management Console (MMC) Certification Authority snap-in to immediately back up the CA. Right-click the CA, select All Tasks from the menu, then select Backup CA. When the Certification Authority Backup Wizard appears, click Next to get a screen on which you can specify what components of the CA to back up, as Figure 5 shows. The wizard will also prompt you for a password to protect the backup.
You must be sure to record the password and store it in a safe place. If you suffer a system failure and either the root or a subordinate CA is lost, you'll need to restore the CA. Otherwise, issued certificates will be rejected as invalid.
Issuing Certificates and Ongoing Tasks
After you create your PKI hierarchy, you might need to distribute the certificate of the root CA by using the Group Policy Editor (GPE). You can also save a copy of the certificate to a file and import the certificate file manually onto systems that trust the hierarchy. . . .
Register
