We currently have an Enterprise (Issuing) CA in Server 2003 that is coming up for renewal. Instead of renewing that CA, we are considering adding an additional CA and enabling it to issue the same templates as the older CA. When certificates that were auto-enrolled from the old CA are about to expire (reach the 'Renewal Period'), will they renew/auto-enroll from the new CA? Thanks in advance.

If certificate templates are configured for autoenrollment, clients will renew their certificates based on these templates from any CA server where particular template exist. However you need to remove templates from old CA server.My weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com

That's what we were thinking. Just wanted to confirm. Thanks again.