Certificate Services Migration to diffrent host
Hi, i want to move a CA Enterprise Authority from w2k3 to w2k8r2. The Target Server Name is diffrent to the source server. I followd the CS Migration Guide from Microsoft. What i did: - backup CA db and registry source server - uninstalled service - installed Enterprise Authority Role - importet db and restored reg Settings - changes CAServerName in Registry to actual hostname But in the AD the CertificateAuthorities is still pointing to the old Server. CN=Certification Authorities,CN=Public Key Services,CN=Services,CN=Configuration,DC=test,DC=test But the CDP is updated with the new Hostname. In the Migration Guide for diffrent hostname Migrations: 1.If the target CA's computer name is different from the source CA's computer name, search the file for the host name of the source CA computer. For each instance of the host name found, ensure that it is the appropriate value for the target environment. Change the host name, if necessary. Update the CAServerName value. 2.If the host name is located in the .reg file as part of the CA name, such as in the Active value within the Configuration key or the CommonName value within the CAName key, do not change the setting. The CA name must not be changed as part of the migration. This means the new target CA must have the old CA's name, even if part of that name is the old CA's host name. Iam not very Familar to CS. What did i forget? Is it preferable trying to restore to the same hostname, as i see, the CA Authority name will always be the old name of the old server. Thanks; Marco
May 10th, 2011 9:39pm

Hello, if the guide is not enough for detailed questions you should use the security forum instead this one: http://social.technet.microsoft.com/Forums/en/winserversecurity/threadsBest regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
May 11th, 2011 12:20am

I have done this and the one thing I was concerned about was going from 32 to 64 bit. I ended up having no issues at all, as a matter of fact I was going to right this long Blog up about my experience and steps required and it was unbelievably painless. I have the links of what I did in the link below. http://blogs.dirteam.com/blogs/paulbergson/archive/2010/10/18/upgrade-certificate-server-from-32-to-64-bit.aspx -- Paul Bergson MVP - Directory Services MCITP: Enterprise Administrator MCTS, MCT, MCSE, MCSA, Security+, BS CSci 2008, Vista, 2003, 2000 (Early Achiever), NT4 http://www.pbbergs.com Twitter @pbbergs http://blogs.dirteam.com/blogs/paulbergson Please no e-mails, any questions should be posted in the NewsGroup. This posting is provided "AS IS" with no warranties, and confers no rights.
May 11th, 2011 8:31am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics