Moving a Certificate Authority

Giganews Newsgroups
Subject: Moving a Certificate Authority
Posted by:  Charlie (babo…@news.postalias)
Date: Mon, 20 Mar 2006

I would like to replace an old server, but it's an enterprise certificate
authority.  Both it and the new server are running W2K3, SP1.
Is there any way to move the cert database to the new server?

What about backing up the Certificate Authority, "wiping out" the old server
and giving the new one the same name as the old one?  Will that work or will
the SID be a factor?

I also have a subordinate cert authority.  Assuming that I have to rebuild
an enterprise one from scratch, I'm guessing that the subordinate one would
have to be decommissioned and rebuilt as well.  Is that correct?

Thanks.

Replies