I have a Windows Server 2003 Certificate Services hierarchy which is headed up with an Offline Root CA which has an Enterprise Issuing CA underneath. Changes in requirements mean that the Offline Root is no longer required so I need some advice on how to decommission this from the environment so that I'm just left with a single Enterprise CA doing everything. Does anyone know the required steps to accomplish this?Jonathan Conway | MCSE MCP VCP

Hello, start here: http://support.microsoft.com/kb/889250 http://support.microsoft.com/kb/555151Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Hi - thanks for the reply. I'd seen those articles but I was concerned that they both refer to Enterprise CAs, whereas my Root CA is a Stand-Alone Offline Root CA (i.e. not integrated with AD) and I wasn't sure if the process would differ because of this? I was hoping that the process would be much easier given that it wasn't an Enterprise CA but really I'm just after a way of getting it done that won't stop all my certs from functioning!Jonathan Conway | MCSE MCP MCTS VCP

Hello, maybe you should post to the Security forum instead this one: http://social.technet.microsoft.com/Forums/en/winserversecurity/threadsBest regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.