RE: Certificate Authority

From: Brian Komar [MVP] (bkomar_at_nospam.identit.ca)
Date: 09/19/05 

Date: Mon, 19 Sep 2005 16:20:12 -0500

In article <560929E2-9E8D-4874-9A22-C25F4DDB093F@microsoft.com>,
PabloEPerieK@discussions.microsoft.com says...
> rian: this is not a backup made from the CA MCC, I restore a full backup
> that I made ussing HP Data protector.
>
>
>
Did you include the system state? You may be able to recover using the
system state during the restore. If you just backed up the file system,
you are probably not ok.

The only possibility is that you first restore the CA's private key.
Check whether the private key is available:
1) Open the Certificates MMC focused on the local computer
2) Verify that a CA certificate exists in the local store.

If the certificate exists, and the General page states that you have the
private key associated with the certificate, then you may be able to
restore by doing the following:
1) Remove Certificate Services
2) Install Certificate Services.
3) During the installation, on the Public and Private Key Pair page,
select to use an existing key.
4) On the Certificate Database Settings you should be able to select to
use the existing database

HTH,
Brian

Relevant Pages

  • Re: recovering files encrypted using EFS
    ... > same name and password as the old WinXP installation, ... > intact backup of the old harddisk on COMP2, ... > didn't export the EFS certificate, ... I could of course restore ...
    (microsoft.public.windowsxp.security_admin)
  • Re: CA Root Certificate storage location
    ... The system state backup contains everything for the CA. Restore the full ... So I have the "old" registry, Certificate Services ...
    (microsoft.public.platformsdk.security)
  • Re: Cannot access EFS folders after re-install..help please!
    ... your private key and the certificate is part of your user profile. ... have a backup, you need to restore your previous user profile. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Cannot get EFS recovery agent function to work!
    ... Glad you got it to work but the EFS private key that was used to encrypt the ... files must have been available - possibly from a restore of the user's ... >> snapin for user to view certificate information and the certificate will ...
    (microsoft.public.win2000.security)
  • backup / restore of ssl certificate on iis5
    ... I am trying to export a certificate from one iis 5.0 server to another, ... The backup procedure prodoces a file type .pfx ... The restore procedure asks you to look for a .key file ... I have tried the restore procedure with the .pfx file that is produced ...
    (microsoft.public.inetserver.iis)