RE: Upgrade from Standalone to Enterprise

Yes this is right:
Root -> Subordinate -> Issuing

Issuing is Enterprise, Root and Sub is standalone.

My question is this. I have to convert the 2 standalones to enterprise. I
know I can do that by backing up PKI, uninstall, reinstall as Enterprise and
restore PKI. As i do this am I likely to break any of the 100's or
certificates that have been issed by my Issuing CA?

"tomasz" wrote:

The way I read it is that you have this:
Root -> Subordinate -> Issuing

You want to change Root & Sub to Enterprise?
Issuing is already Enterprise, correct?

What is your question again please?


"Gunna" wrote:

Hi, Have a Root and Subordinate CA both on Server 2003 Standard running as
standalone. Also have a 3rd teir issuing server running as Enteprise CA on
2003 Server Enterprise.

I may need to u pgrade everythign to Enterprise CA's. I know I have to
basically backup the 2 CA's and then install CA Enterprise and restore. My
question is about the 2nd Sub ordinate and 3rd teir Entrprise issuing server
which I issues out of the 2nd tier Sub ordinate. Do I have to reinstall
that? Will it continue to work or do I have to create that aswell? I assume
if I have to recreate them all my template may be lost?

Can anyone advise
.

Relevant Pages

  • Re: Windows Server 2003 Enterprise PKI
    ... I personally don't know how two issuing CAs interact in this situation. ... I would say it is safest to have all issuing CAs be Enterprise ... CA's need to be running Enterprise Ed. or can just one be, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Windows Server 2003 Enterprise PKI
    ... We have an empty root domain and one child domain where all our AD resources ... One of the suborninate issuing CA's will be ... Win2k3 Enterprise Ed. with regards to V2 templates, ... CA's need to be running Enterprise Ed. or can just one be, ...
    (microsoft.public.windows.server.active_directory)
  • RE: Upgrade from Standalone to Enterprise
    ... Issuing is Enterprise, Root and Sub is standalone. ... restore PKI. ...
    (microsoft.public.security)
  • Re: Windows Server 2003 Enterprise PKI
    ... The root CA in your PKI does not need to be WS2K3 Enterprise Edition. ... The issuing CA in your domain should be WS2K3 Enterprise Edition to enable ... some form of a CA will be running Windows Server 2003 Standard Ed. ... running Enterprise ed. or would all 3 need to be running Enterprise Ed? ...
    (microsoft.public.windows.server.active_directory)
  • RE: Upgrade from Standalone to Enterprise
    ... You want to change Root & Sub to Enterprise? ... Issuing is already Enterprise, correct? ... Also have a 3rd teir issuing server running as Enteprise CA on ...
    (microsoft.public.security)