Install second Enterprise Root CA and remove old one?


I have an Enterprise Root CA installed on a 2003 file server I'd like to
rename and then remove from the network, of course I first have to
remove CA services.

The only thing I'm really using the CA issued certs for (to my
knowledge) is EFS / EFS Recovery Agents

Could I deploy a new Enterprise Root CA on a new server, then issue a
new EFS Recovery Agent from the new CA, wait for the changes to
propagate and then remove the old CA?

Is there anything else I should be on the lookout for?


Followup question is, if I have the choice of installing the new CA on
a 2008 Domain Controller, or 2008 File Server - which one would I pick
and why?


--
plutoz
------------------------------------------------------------------------
plutoz's Profile: http://forums.techarena.in/members/51744.htm
View this thread: http://forums.techarena.in/server-security/1209801.htm

http://forums.techarena.in

.

Relevant Pages

  • Re: File server stops working
    ... Well, it would be worth installing all of the 2009 updates, anyway; ... I don't recall seeing any that ... We have run into a situation when the file server component won't accept ...
    (microsoft.public.windowsce.platbuilder)
  • Re: sbs 2003 r2 sp1 with quickbooks premier 2009 and trendmicro av.
    ... I don't believe I've seen that recommendation for the file server. ... there are two options - full and file server. ... Les Connor [SBS MVP] ... I was actually thinking of installing the full QB install - it was intuit recommends.. ...
    (microsoft.public.windows.server.sbs)
  • Re: X11 setup problem
    ... Installing the X11 iso on a fossil based file server. ... # start the iso9660 filesystem server ...
    (comp.os.plan9)
  • Re: How Easy? Install SBS 2003
    ... you will want more than just a file server. ... SBS is so much more; and, trust us, you will use it as more. ... I guess the merit of installing SBS now is that it opens up all ... Although a peer-to-peer network would ...
    (microsoft.public.windows.server.sbs)
Loading