I came into a position where i manage a network. I am in the process to plan migration from server 2003 to server 2012 R2 and have found that both Domain controllers do not have Certificate Authentication Service running. All migration writes point to backup the certificate and import it to the new server.
If its not active on any of the DC servers can i create a new one or is there another way to grab the key from the old DC servers.
Thank you in advance for your help.