All computers that use SSL or key packages will need to have the security tools packages installed. There must be at least one machine, the Root CA host, where
The user name of the Root CA exists.
The credentials of the Root CA are stored.
FNS is properly installed.
The Root CA will create and store credentials for web sites on this host.
Running Sun WebServer on the Root CA host is not necessary. A Sun WebServer machine can get access to the credentials for web sites it hosts by copying the files from the Root CA hosts.