Migration Certification Templates

hi folks

   Recently was created a new server for change type of certificate (from SHA1 to SHA2). I need migrate certificate template from old CA to new CA and find which certificate template are still used and disable old CA. Both CA's are same domain.  Which are  steps for to do this task?
Leonardo MendesNetwork AnalystAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Jakob DigranesSenior ConsultantCommented:
templates are stored in active directory - you add templates you want to use to the certificate server. If you need an overview over templates in user;
1. check which templates are added to SHA1 server
2. check with issued certificates which templates they're based on

for controlling template issuance, look at certificate template security and take a look at enroll and autoenroll permissions
0
Leonardo MendesNetwork AnalystAuthor Commented:
Hi Jakob

    A few days ago i found two article about migration CA infrastructure from SHA1 to SHA2. This:

https://blogs.technet.microsoft.com/askds/2015/10/26/sha1-key-migration-to-sha256-for-a-two-tier-pki-hierarchy/

and this

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn771627(v=ws.11)

              And I create an Lab for test migration CA and renew certificates. So far everythink works fine

Thanks
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Jakob DigranesSenior ConsultantCommented:
I've used the first article myself - it works fine
0
Leonardo MendesNetwork AnalystAuthor Commented:
Thanks Jakob
0
Seth SimmonsSr. Systems AdministratorCommented:
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I have recommended this question be closed as follows:

Accept: Leonardo Mendes (https:#a42440140)

If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

seth2740
Experts-Exchange Cleanup Volunteer
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
certificatio

From novice to tech pro — start learning today.