Setting up a subordinate CA with Verisign as the root CA

[Dave]

I would like to set up a CA for my Win 2000 domain so that I may issue
digital certificates to my users for use in encrypting email. Can someone
point me to someone tell me how I can have Verisign be the root CA while my
Windows 2000 CA will be the subordinate CA?

 

[Keith W. McCammon]

Doesn't work quite like that. You can't just set up a subordinate CA for a
corporate authority. You need to set up your own root, and then set up a
subordinate for that.

 

[David Cross [MS]]

From a Microsoft perspective, this is completely supported. Baltimore
technologies has supported this for years through their Omniroot program -
they offer this service publicly along with many other public root CA
companies. Verisign should also offer this service, you will need to
contact their sales department for proper procedure and costs for the
signing process.