• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 536
  • Last Modified:

How do I move a Windows 2003 Subordinate CA onto a differnet server?

I am trying to move an existing Win 2003 sub CA (of an Enterprise CA) onto a new server.  The root CA will stay but I'd like to get rid of two sub CAs and replace them with member servers on new hardware with new names.  The two existing sub CAs are 2003 DCs that need to be demoted and removed from the network.  There are already several hundred certs that have been issued by these sub CAs.  How can I move them to one of the new servers (or do Ihave to)?  Can I just demote them, turn of CA services and let clients request new certs from the new servers when their current ones expire?

1 Solution
MS has a Support KB article for doing this:


hope that helps
rccg94Author Commented:
Thanks, Cleaner.  I saw that one and probably should have mentioned that we're trying to lose the server name too.

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now