Hi folks; I'm running '08 R2 with Certificate Services. The problem is that I have two root certificates, one that is no longer used from a previous install and one that is valid so both are being distributed as valid root certs even though one is no longer needed. Does anyone know how I can remove the extraneous one so that I no longer see it? Thanks!

You should be able to find and delete the old root certificate using PKIVIew.msc For the root CA certificate, delete the old CA certificate from the Certification Authorities tab 1) Start pkiview.msc 2) Right-click Enterprise PKI, and then click Manage AD Containers 3) Click the Certification Authorities tab 4) Select the old root CA certificate and then delete it Brian

Awesome, awesome, awesome - thank you for an informative answer that directly addressed and resolved the situation!