[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

How to Migrate root CA server

Posted on 2012-08-24
11
Medium Priority
?
1,010 Views
Last Modified: 2012-09-11
Hi

I do know how to Migrate CA role to new server with the same name however how to proceed if the destination server name is changed
0
Comment
Question by:Sarang Tinguria
  • 6
  • 4
11 Comments
 
LVL 7

Expert Comment

by:ksharma4
ID: 38330701
0
 
LVL 18

Author Comment

by:Sarang Tinguria
ID: 38330745
5.Rename the old server, or permanently disconnect it from the network

This article I have seen already but it ask you to change the name post migration ...Which i don't want to
0
 
LVL 52

Expert Comment

by:Manpreet SIngh Khatra
ID: 38331859
So are you saying you want to keep the servers as they are and also have the Root CA server changed ?
What other role does the Current CA server hold ?
What is the current and new windows server versions ?

- Rancy
0
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

 
LVL 52

Expert Comment

by:Manpreet SIngh Khatra
ID: 38331862
0
 
LVL 18

Author Comment

by:Sarang Tinguria
ID: 38332761
So are you saying you want to keep the servers as they are and also have the Root CA server changed ?--Yes
What other role does the Current CA server hold ?--DC
What is the current and new windows server versions ?-2003 X32 to 2008 X32

Second link given also does not have any addtional things than previous article even registry restoration part is missing in 2nd article
0
 
LVL 52

Expert Comment

by:Manpreet SIngh Khatra
ID: 38332780
Check this

Would like to migrate to new CA Infrastructure in best manner
http://www.experts-exchange.com/Security/Operating_Systems_Security/Windows/Q_26377178.html
0
 
LVL 18

Author Comment

by:Sarang Tinguria
ID: 38343788
Its asking to create subordination which is time consuming ...I had already seen this link before ..Its quite closure and good by not what i want
0
 
LVL 52

Expert Comment

by:Manpreet SIngh Khatra
ID: 38344232
Agree its time consuming but a safer way to get the migration. rest is your wish :)

Let me know if you find another way.

- Rancy
0
 
LVL 18

Author Comment

by:Sarang Tinguria
ID: 38352640
It will go like create subordinated CA in My env keeping my existing Root CA and I should issue certs from there ..Which is not feasible
0
 
LVL 18

Accepted Solution

by:
Sarang Tinguria earned 0 total points
ID: 38359567
Hi Rancy

I agree with below solution...can I have second opinion of yours
===================================================

This CA is typically used for encrypting the content of a Web site. After the certificate services are installed, Windows does not allow us to change the name of the machine, nor the the domain it belongs to. But you can easily overcome this restriction.

First, some background information: The information about installed services is stored in the registry, under HKLM\System\CurrentControlSet\Services key. Info about Certificate Services is stored under "CertSvc" title.

Now, the procedure goes like this:

    Using the Regedit registry editor, export "CertSvc" value to a file then delete "CertSvc" value.
    Restart the computer.
    Rename the computer and before restarting the computer, import the content of the file you created before.
    Restart the computer.

Interestingly, the Certification Authority management console reports the server with its former name, but this does not cause any problem: Certificate Services distributes certificates happily.

Source : http://www.windowsitpro.com/article/certificate-services-microsoft/how-to-change-the-name-of-a-certificate-server
0
 
LVL 18

Author Closing Comment

by:Sarang Tinguria
ID: 38386093
This Has done things well
0

Featured Post

Upgrade your Question Security!

Add Premium security features to your question to ensure its privacy or anonymity. Learn more about your ability to control Question Security today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If something goes wrong with Exchange, your IT resources are in trouble.All Exchange server migration processes are not designed to be identical and though migrating email from on-premises Exchange mailbox to Cloud’s Office 365 is relatively simple…
Steps to fix “Unable to mount database. (hr=0x80004005, ec=1108)”.
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question