<div>
Thanks, Cleaner. &nbsp;I saw that one and probably should have mentioned that we're trying to lose the server name too.
</div>


Thanks, Cleaner.  I saw that one and probably should have mentioned that we're trying to lose the server name too.

<div>
<div class="content wysiwyg-content">
I am trying to move an existing Win 2003 sub CA (of an Enterprise CA) onto a new server. &nbsp;The root CA will stay but I'd like to get rid of two sub CAs and replace them with member servers on new hardware with new names. &nbsp;The two existing sub CAs are 2003 DCs that need to be demoted and removed from the network. &nbsp;There are already several hundred certs that have been issued by these sub CAs. &nbsp;How can I move them to one of the new servers (or do Ihave to)? &nbsp;Can I just demote them, turn of CA services and let clients request new certs from the new servers when their current ones expire?<br />
<br />
Thanks
</div>
</div>


I am trying to move an existing Win 2003 sub CA (of an Enterprise CA) onto a new server.  The root CA will stay but I'd like to get rid of two sub CAs and replace them with member servers on new hardware with new names.  The two existing sub CAs are 2003 DCs that need to be demoted and removed from the network.  There are already several hundred certs that have been issued by these sub CAs.  How can I move them to one of the new servers (or do Ihave to)?  Can I just demote them, turn of CA services and let clients request new certs from the new servers when their current ones expire?

Thanks

How do I move a  Windows 2003 Subordinate CA onto a differnet server?

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).

Windows Server 2003

Microsoft Forefront, formerly known as Internet Security and Acceleration Server (ISA Server), is a network router, firewall, antivirus program, VPN server and web cache that runs on Windows servers. It includes identity management and protection systems, and discontinued systems for threat management and network protection, along with protection for Sharepoint and Exchange. The scope of discussions includes forward and reverse proxy, application and service publishing, virtual private networks (VPNs), outbound access rules, SSL certificates and network routing within either a single node or an highly-available array pairing.

Microsoft Forefront ISA Server

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.