Hello Steve,

If you are adding a second subordinate CA for load balancing/fault tolerance reasons, the process will be the same as adding the first subordinate CA.

Install the CA role Configure the CA as an enterprise subordinate CA, and request a subordinate CA certificate from the root CA Issue the new certificate to the new subordinate CA Make sure the new subordinate CA trusts the root CA Install the subordinate CA certificate and start the CA service

For load balancing/fault tolerance you will have to configure all of the same certificate templates (which templates to issue, permissions on templates, etc.) on the new subCA as are on the existing subCA. They don't really work together, which ever one hears a new certificate request first will respond, so they need identical configuration.

Just keep in mind, certificates issued from one subCA are tied to that CA. The second subCA cannot renew certificates issued by the first subCA. So if the first subCA is unavailable, the second subCA will be able to handle the new certificate requests, but renewals will have to wait until the first subCA is back online.

Hope this helps,

Mike

There are several PowerShell storage cmdlets that you can use to retrieve information about drives and StoragePools. Here is a link to the Technet reference: https://technet.microsoft.com/en-us/library/hh848705(v=wps.630).aspx

A few in particular would be Get-PhysicalDisk, Get-ResiliencySetting, and Get-StoragePool. Most of these cmdlets will return more information when piped into a format-list cmdlet.