The current domain controller that houses our cert services and CA is failing in a pretty bad way. We have three other domain controllers that could run this service already in place, but I need a process to move things without breaking the environment. I'd prefer to not set up a new domain controller for this operation. I've seen articles on how to move cert services from a 2k box to another 2k box, but nothing on moving from 2k8R2 to another 2k8R2 domain controller. I guess I have two questions. First, is it possible to change the root CA server like this without breaking things, and second what would be the proper process?

For details about Certificates,the Security forum is the better place: http://social.technet.microsoft.com/Forums/en/winserversecurity/threadsBest Regards, Sandesh Dubey. MCSE|MCSA:Messaging|MCTS|MCITP:Enterprise Adminitrator | My Blog Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

For details about Certificates,the Security forum is the better place: http://social.technet.microsoft.com/Forums/en/winserversecurity/threadsBest Regards, Sandesh Dubey. MCSE|MCSA:Messaging|MCTS|MCITP:Enterprise Adminitrator | My Blog Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Please refer to this: AD CS Migration: Migrating the Certification Authority http://technet.microsoft.com/library/ee126140.aspx Regards, MiyaMiya Yao TechNet Community Support

Please refer to this: AD CS Migration: Migrating the Certification Authority http://technet.microsoft.com/library/ee126140.aspx Regards, MiyaMiya Yao TechNet Community Support

Thanks, that should do nicely!

Thanks, that should do nicely!