Decommissioning a CA
- From: Goran Jovanovic <GoranJovanovic@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Tue, 3 Feb 2009 07:28:21 -0800
Hi,
Not sure if this is the right place but will ask it here
I have a Windows 2000 Server which is a DC and also the CA for a domain. It
is time to decommission 2000 server and convert it to a 2003 bigger/better
box.
I cannot un-dcpromo the 2000 box because the CA is there.
The CA was originally installed to give out computer certs when we thought
that we were going to deploy an 802.1x cert based wireless system. That did
not happen but the CA stayed in place. Now the CA has given out lots of
computer certs but it has not been used for anything else.
What are the implications of removing the CA? I understand that the certs
will no longer be valid but will anything break? How can I check? Anything
special to do before killing the CA?
Thanks
Goran
.
- Follow-Ups:
- Re: Decommissioning a CA
- From: Lognoul Marc [MVP]
- Re: Decommissioning a CA
- Prev by Date: Question about LDAP
- Next by Date: Re: Adding a User
- Previous by thread: Question about LDAP
- Next by thread: Re: Decommissioning a CA
- Index(es):
Relevant Pages
|