Mike Howard

<div>
<div class="content wysiwyg-content">
We have a single Root Enterprise CA on 2008R2 that I want to migrate to 2012R2 (on the way to 2016). &nbsp;I am going to follow the migration instructions at <a href="https://blogs.technet.microsoft.com/canitpro/2014/11/11/step-by-step-migrating-the-active-directory-certificate-service-from-windows-server-2003-to-2012-r2/" rel="ugc">https://blogs.technet.micr<wbr />osoft.com/<wbr />canitpro/2<wbr />014/11/11/<wbr />step-by-st<wbr />ep-migrati<wbr />ng-the-act<wbr />ive-direct<wbr />ory-certif<wbr />icate-serv<wbr />ice-from-w<wbr />indows-ser<wbr />ver-2003-t<wbr />o-2012-r2/<wbr /></a> (even though it is for 2003 - 2012R2, it seems to cover what I am doing). &nbsp;I have a couple of questions:<br />
<br />

<ul>
<li>Do I need to rename the new CA server to the same name as the old one (like with a 2003-2008 migration)?</li>
</ul>
<ul>
<li>How do I reissue the CA cert as SHA256 instead of SHA1?</li>
</ul>
</div>
</div>


We have a single Root Enterprise CA on 2008R2 that I want to migrate to 2012R2 (on the way to 2016).  I am going to follow the migration instructions at https://blogs.technet.microsoft.com/canitpro/2014/11/11/step-by-step-migrating-the-active-directory-certificate-service-from-windows-server-2003-to-2012-r2/ (https://blogs.technet.microsoft.com/canitpro/2014/11/11/step-by-step-migrating-the-active-directory-certificate-service-from-windows-server-2003-to-2012-r2/) (even though it is for 2003 - 2012R2, it seems to cover what I am doing).  I have a couple of questions:

Do I need to rename the new CA server to the same name as the old one (like with a 2003-2008 migration)?

How do I reissue the CA cert as SHA256 instead of SHA1?


Migrate Enterprise CA from 2008R2 to 2012R2 and reissuing root cert

active directory certificate service

Enterprise Certificate Authority

Windows Server 2012 is the server version of Windows 8 and the successor to Windows Server 2008 R2. Windows Server 2012 is the first version of Windows Server to have no support for Itanium-based computers since Windows NT 4.0. Windows Server 2012, now in its second release (Windows Server 2012 Release 2) includes Foundation, Essentials, Standard and Datacenter, and does not support IA-32 or IA-64 processors.