Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a question related to PKI Infrastructure: should an organization go with Microsoft PKI or an independent separate PKI Infrastructure? Is there any licensing restrictions if I use Microsoft PKI Infrastructure? Or should I get an independent PKI infrastructure from a vendor that offers PKI TSA and SP (Signature Proof) Infrastructure?

share|improve this question

Very hard choice and it depends on your requirements.

I am a fan of the Microsoft PKI stack, it is very easy to use and manage. That aside, if I am doing anything related to Active Directory / per user certificates etc, the Microsoft PKI is the best on the market, as you expect, it integrates well and seamless. I love it!

There are alternatives out there, but unless you are willing to pay for support or know it very well, I would stay clear - at the end of the day, the Microsoft CA stuff does everything I could need.

As for licensing, I always assumed it was free with a valid Windows (server) licence in the same way as DHCP or DNS server can be used to service/manage as many clients as you need.

share|improve this answer
Is the microsoft PKI certificate a standards based certificate – abmv May 19 '10 at 11:48
Also does the solution have Signature Proof services etc ? and CAL management and workflows etc? – abmv May 19 '10 at 11:52
@abmv - it can be scripted and integrated in to your workflow - as for standards, as far as I know, it uses standards as I have issued a few web certificates that are used by Windows Mobile and Firefox on Linux (after installing our root certificate to the device). – William Hilsum May 20 '10 at 0:39

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.