Standalone CAs can be members or a workgroup or domain. Standalone CAs do not require AD DS and can be used without a network ...