One PKI platform for two AD forests

Hello There,

We have 2 AD domains (Forests) connected by bi-directional AD trust. These two domains have their own PKI platforms.

We are planning to build single PKI platform which can service for both domains.

Is it possible to service two domains with single PKI platform? If so, could you please provide some design inputs?

Thanks

Mahesh

Mahi