2k digital certificates-PKI

Hi-has anyone installed CSA on 2k? I need to know the configuration and infrastucture gotcha’s.
It will be on a lan and on the same subnet. Do I have to worry about fsmo roles and root dc’s? Do I have to have my own forest, and if not, what is the relationship with separate domain’s?
Any other info or pointers is appreciated.
tx in advance