"Rip and Replace" certificate services from Windows Server 2003 to 2008
September 29th, 2008
Comments off
Is it possible to migrate a Windows Server 2003 based Certification Authority to Windows Server 2008?
The answer is yes but you need all detailes in the Active Directory Certificate Services Upgrade and Migration Guide from Microsoft found at http://www.microsoft.com/downloads/details.aspx?FamilyID=C70BD7CD-9F03-484B-8C4B-279BC29A3413&displaylang=en
The short answer would be that you need to performe the following steps:
- Backup your existing CA using the certutil -backup command
- Install the new Windows Server 2008 CA with the same name as the replaced server
- Add the ADCS role and import the CA-certificate from the backup
- Upgrade the templates to WS2008
- Restore the old CA database using the certutil -restore command
/Hasain
Categories: ADCS, certutil, Security, Windows Server 2008
