Re: Move Certificate Authority

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



"Jeff" <jeffpoling@xxxxxxxxx> wrote in
news:#6u8mrhWFHA.2700@xxxxxxxxxxxxxxxxxxxx:

> We have an internal certificate authority that is installed on a
> domain controller. I need to demote that DC and move the CA to
> another server. Is there a documented procedure to handle that?
>
> Thanks,
>
> Jeff
>
>
>
>

Hi Jeff --

Please see the article:

http://support.microsoft.com/default.aspx?scid=kb;%5BLN%5D;Q298138



1. Back up the keys, database, and registry entries per the article.

2. Uninstall Certificate Services.

3. Demote the DC.

4. Reinstall Certificate Services per the article.



If you need to move the CA to another computer, make sure that it has the
same name as the old CA server, and is running the same version of the OS.

Just to emphasize, you must make sure that the computer name on both
computers is the same.

--
James McIllece, Microsoft

Please do not send email directly to this alias. This is my online account
name for newsgroup participation only.

This posting is provided "AS IS" with no warranties, and confers no rights.
.



Relevant Pages

  • Re: Move Certificate Authority
    ... I need to demote that DC and move the CA to ... > Hi Jeff -- ... Uninstall Certificate Services. ... Reinstall Certificate Services per the article. ...
    (microsoft.public.windows.server.general)
  • Re: Demote a Domain Controller
    ... Think the best way is to move the CA first and then demote the server. ... This posting is provided "AS IS" with no warranties, ... DC promo it told me that I had to remove the certificate services ...
    (microsoft.public.windows.server.setup)
  • Demote a Domain Controller
    ... I want to demote a domain controller to a member server. ... it told me that I had to remove the certificate services first. ...
    (microsoft.public.windows.server.setup)
  • Re: Certificate Services fails to start
    ... However for the certificate services has corrupted, ... For now the certificate service is running properly, ... Microsoft CSS Online Newsgroup Support ... If you see a User DSN named CertSrv that is using the Access database, ...
    (microsoft.public.windows.server.sbs)
  • Re: Certificate Services fails to start
    ... Under Database, click Select. ... you may need to reinstall the Certificate ... Backup the CA private key, certificate, and database. ... Uninstall Certificate Services. ...
    (microsoft.public.windows.server.sbs)