Hello i've a couple of question regarding Cross Forest Enrollment.
I've setup a Enterprise Failover Cluster CA in Domain A.
I want to deploy Certificates to Domain B which is a Multidomain. I copy the templates on Root-Domain-B_DC from Domain-A_CA.
1.The DSConfigDN and DSDomainDN is configured for Domain A. Do i need to change this in the targetforest or even for each childdomain in Domain B? When i copy my Templates they will display of course name of Domain A. Could this be an issue?
2. What would be the Best practise to deploy to all members in all domains. Do i create for example one User Certificate for all Domains or should i deploy for each Domain a own User Certificate? I would like to create one Template for all domains but i'm not sure if i missing something?