Microsoft Certificate Authority (CA) PKI Upgrade

Current Configuration:  Win 2008 R2 Domain, Win Server 2008 Enterprise Offline Root CA, Win Server 2008 Enterprise Subordinate CA.

I'd like to upgrade our CA environment from 2008 to 2012 R2.  I was thinking the best way is to create a parallel environment with a new Win 2012 R2 Std Offline Root CA and Win 2012 R2 Std Subordinate CA.  So both CAs would be active at the same time.   Old_RootCA_2008 > Old_SubCA_2008  and New_RootCA_2012R2 > New_SubCA_2012R2.   Then we issue new certs from the new CA and once the old certs are no longer required we decommission the Old CAs.

Is this a reasonable approach?  
Or should I keep the Old_RootCA_2008 and just create a 2nd Sub CA New_SubCA_2012R2 and decommission the Old_SubCA_2008 ?  
Or should I work on upgrading the 2008 to 2012R2 and how would I do that?
Any other ideas or advice?

Thanks...
LVL 1
DigitalInfuzionAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Natty GregIn Theory (IT)Commented:
The first instance makes more sense, and gives you options for troubleshooting should something go wrong. My 2 cents

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
DigitalInfuzionAuthor Commented:
Thanks for the feedback.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.