Daniel Cox
asked on
How do you remove Certificate Authorities when they have not be gracefully removed?
In our domain, the servers that previously were used for Public Key Services have all been decommissioned through failure. I need to confirm if it is safe to remove the entries from AIA, CDP, Certification Authorities, Enrollment Services, and KRA or if there is a cleaner way to do this.
https://support.microsoft.com/en-us/help/889250/how-to-decommission-a-windows-enterprise-certification-authority-and-r goes over the decommissioning process in detail. If the server was removed, you'll need to go to Step 6 and clear out the AD information and everything after that. Do what you can of steps 1-5.
This question needs an answer!
Become an EE member today
7 DAY FREE TRIALMembers can start a 7-Day Free trial then enjoy unlimited access to the platform.
View membership options
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.