Moving a certificate Authority

Certificates are not my thing :-)

I'm on a network that was a one DC forest a few years ago (Windows 2003
server, fully patched...). Certificate services were installed for internal
use for EFS and then WSUS. NOw the network is expanded and there's a desire
to use a VM DC and put certificate services on there instead. howver the
standard migration process rquires the original server to be decommissioned
or renamed. That cannot happen as it still host F&P and other stuff, that
would a PITA to relocate now (and is not really needed!)

So, I'm familiar with KB 298138 now, but this does not give me a "keep the
old server". I guess it's impossible now, but just in case does anyone have
knowledge out there that isn't on google or support?

Thanks, Peter

S
Fri May 02 01:50:58 PDT 2008

You cannot rename the CA. So your options are - either P2V the whole lot
keeping the name, or fing a way to access other resources by new name. I
know it's PITA but I would recommend against hacking your way through
renaming a CA (not impossible I think but renders the CA unsupportble etc)

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

"P J Bryant" <PJBryant@discussions.microsoft.com> wrote in message
news:4EFBA1C5-212F-4232-B2FE-DF490DD8FD9D@microsoft.com...
> Certificates are not my thing :-)
>
> I'm on a network that was a one DC forest a few years ago (Windows 2003
> server, fully patched...). Certificate services were installed for
> internal
> use for EFS and then WSUS. NOw the network is expanded and there's a
> desire
> to use a VM DC and put certificate services on there instead. howver the
> standard migration process rquires the original server to be
> decommissioned
> or renamed. That cannot happen as it still host F&P and other stuff, that
> would a PITA to relocate now (and is not really needed!)
>
> So, I'm familiar with KB 298138 now, but this does not give me a "keep the
> old server". I guess it's impossible now, but just in case does anyone
> have
> knowledge out there that isn't on google or support?
>
> Thanks, Peter