Solved

Migrating Windows 2003 Certificate Authority to Windows 2008 R2 in different domain

Posted on 2015-02-12
4
65 Views
Last Modified: 2015-03-11
I have a windows 2003 Root CA in a domain. I need to migrate this server to a 2008 R2 server in a different domain.

There is a two-way trust between the two domains. However, I need to migrate the CA server to the other domain and I was wondering what would be the best approach?

If something breaks this can wreak havoc and I have a feeling there is not easy way of doing this. thanks in advance for your feedback

t
0
Comment
Question by:tobe1424
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 6

Accepted Solution

by:
rgorman earned 500 total points
ID: 40606375
I am pretty sure there is no way to 'migrate' a root CA.  It is locked to the domain name it is associated with when it was implemented.  Your best bet would be to setup the new root CA and start the process of reissuing certificates for your servers from it and just decommission the old one when it isn't needed any longer.
0
 

Author Comment

by:tobe1424
ID: 40607922
Thanks for the input.

I see...no 'migration' in this situation.

Let me check my other domain to see if there is a 2008 CA already in place..

So this is one of those 1 off's where we basically decom at the very end of the domain's life
0
 
LVL 59

Expert Comment

by:LeeTutor
ID: 40658996
I've requested that this question be deleted for the following reason:

The question has either no comments or not enough useful information to be called an "answer".
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
100 cpu svchost.exe and strange process explorer results 9 91
Outlook 2016 processing loop 4 52
Windows 7's Backup Utility 12 65
SCCM 2012 Queries 2 16
By default the complete memory dump option is disabled in windows . If we want to enable the complete memory dump for a diagnostic purpose, we have a solution for it. here we are using the registry method to enable this.
A quick guide on how to use Group Policy to create a custom power plan and set it active on Windows 7.
This Micro Tutorial will teach you the basics of configuring your computer to improve its speed. It will also teach you how to disable programs that are running in the background simultaneously. This will be demonstrated using Windows 7 operating…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

710 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question