PKI Setup

Hi Guys,

I need your help/ideas. We have single Windows Certificate Authority (CA/DC- 2008 R2 Server ) and now this CA began to see a lot more and need the high availability (redundancy). I know moving forward required the Two Tire PKI to setup.   

So what is the best way to move this CA from main DC and setup PKI?

As