Re: CA Root Certificate storage location

From: David Cross [MS] (dcross_at_online.microsoft.com)
Date: 05/07/05

  • Next message: Joe Richards [MVP]: "Re: Dissallowing copying of windows files" 
    Date: Sat, 7 May 2005 07:09:27 -0700

    The system state backup contains everything for the CA. Restore the full
    system state and you should have everything. 

    -- 
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Top Whitepapers:
Auto-enrollment whitepaper: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/autoenro.mspx
Best Practices for implementing Windows Server 2003 PKI: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx
Troubleshooting Certificate Status and Revocation whitepaper: 
http://www.microsoft.com/technet/security/topics/crypto/tshtcrl.mspx
Windows Server 2003 web enrollment and troubleshooting guide: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx
"Manfred Gloiber" <no@thank.you> wrote in message 
news:etHSGDiUFHA.2172@TK2MSFTNGP15.phx.gbl...
> Hello,
>
> I have accidently "killed" our Enterprise Root CA running on Windows 
> Advanced Server 2003 but I have a backup made with NTBackup and backud up 
> the System State. So I have the "old" registry, Certificate Services 
> Database etc. Unfortunatly I don't made a backup with "certutil -backup" 
> ...
>
> The Problem is that I want to restore the old CA Root certificate 
> (including the private key) and I don't know where this cert is located. I 
> found out that there is much about certs in the registry und 
> HKLM\Software\Microsoft\[EnterpriseCertificates|SystemCertificates] and so 
> on. There are also some keys (the private keys?).
>
> Is there any way to recover the old Root cert from the NTBackup? Is there 
> perhaps a whitepaper which describes the certificate services and 
> certificate storage locations?
>
> TIA
>
>
> --
> Manfred
>
  • Next message: Joe Richards [MVP]: "Re: Dissallowing copying of windows files"

    Relevant Pages

    • Re: How to use Windows Backup?!!
      ... AD is only backed up as part of the system state, and as such, the system must be in the *same* state. ... With that said, if you are backing up system state *and* the "program files" directory and doing a bulk restore, you will usually be fine. ... Yes I restored without incident from a good SBS backup. ...
      (microsoft.public.windows.server.sbs)
    • Re: Domain Controller cannot boot up after restoring the system st
      ... Moving hardware, or changing hardware, or restoring to new hardware ... Just apply it once, and as long as you backup the whole C: drive, and a System State backup, any backup that you try to restore C: drive and the System State, you can restore it to something different and it should boot. ...
      (microsoft.public.windows.server.general)
    • Re: Windows wont start after AD restore
      ... backed up [Full backup] please restore C: drive and System State ... Documents folders. ...
      (microsoft.public.windows.server.sbs)
    • Re: SBS2003 - Cannot restore GPO following Article 888943
      ... Q. If I do a system stae restore, do I overwrite the exchange data ... >system state, will I alter the exchange data to return to its ... >>The backup will restore the whole system state including the exchange ... DNS entries have be ...
      (microsoft.public.windows.server.sbs)
    • Re: SBS two adapter setup with Netopia Router. Help Save my weeked
      ... >> When you click OK on this message, the server restarts. ... >> are not able to start the server or restore the system state from backup. ...
      (microsoft.public.windows.server.sbs)