Frequently Asked Questions Q: Does Windows 2008 CA require AD schema update? A: No. Q: But Brian Komar’s book says it does? A: Still no. This is simply an error in the book.   AD Schema Requirements for Windows PKI features