RE: Upgrade Standard CA to an Enterprise CA
From: Rebecca Chen [MSFT] (v-rebc_at_online.microsoft.com)
Date: 01/17/05
- Next message: Steven L Umbach: "Re: Security Help"
- Previous message: Chat: "Security of Hotmail & Messenger Account"
- In reply to: Lee: "Upgrade Standard CA to an Enterprise CA"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 17 Jan 2005 03:35:30 GMT
Hi Lee,
Do you mean you want to migrate the stand-alone CA to Enterprise CA? If
this is the case, please
refer to the following article to perform the steps. This article has
detailed how to migrate from a stand-alone CA to a Enterprise CA with
illustrations. I would like to breift the steps below:
1. Backup the existing key pairs used by the CA and its database.
2. Back up the certificate database, the CA certificate, and the CA private
key.
3. Remove the stand-alone CA from the server by uninstalling it
4. Join the computer to a domain in the forest if it is not already joined
to one.
Best Practice The recommended best practice is to install CAs as a member
of the root domain in the forest to provide centralized administration and
control of the PKI services. For additional best practices, see the Windows
Server 2003 Resource Kit.
5. Reinstall the CA by adding the Certificate Services
6. Select Enterprise root CA as the CA Type, and select custom settings for
the key generation.
7.Choose the CSP that has access to the old CA keys, and choose the same
keys and certificate used with the old CA.
8.Select Preserve existing certificate database to use the old database.
9.When prompted for stopping the IIS service, click Yes to finish the
installation of the CA.
More details can be found from :
Windows Server 2003 PKI Operations Guide
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/
security/ws03pkog.mspx#EQAA
HTH!
Any update, let us get in touch!
Best regards,
Rebecca Chen
MCSE2000 MCDBA CCNA
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
- Next message: Steven L Umbach: "Re: Security Help"
- Previous message: Chat: "Security of Hotmail & Messenger Account"
- In reply to: Lee: "Upgrade Standard CA to an Enterprise CA"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
