This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(150.4, 33%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBZ%3C/text%3E%3C/svg%3E)
Hi, we have Enterprise Root Issuing CA in the US. It issues all sorts of certificates to both computers/users in all our locations (US, Serbia, Malta ...). One of them is user certificate which must be valid in order to let him/her into LAN via VPN (FortiClient). We are worried about consequences of WAN link between Serbia/Malta and HQ in US (where CA resides) being down for any reason - people would not be able to get VPN access and work remotely. Since CA we only have at the moment is Enterprise Root Issuing CA what do you think about setting up subordinate enterprise issuing CAs in Serbia and Malta to address problem if WAN link is down or there is something better to be done.
Thank you in advance!