Hello,I have 2003 enterprise CA running on domain controller server. Its currently only issues domain controllers certificates and nothing else. I need to decommission this server and move the CA services to an existing domain controller server. What would you guys recommend the cleans/best practice of moving CA to a different server.I was thinking of removing AD services from this old server and have it run as a member server with CA services. Then convert it to a VM to save from all the mess of moving.-thanks

Hello, Thank you for your post here. The move process may be a little different when you move the CA from Windows Server 2003 to another Windows Server 2003 server or Windows Server 2008 /R2 server. You may refer to the following documents to do the migration: How to move a certification authority to another server http://support.microsoft.com/default.aspx/kb/298138 Move a CA to a Different Computer http://technet.microsoft.com/en-us/library/cc755153(WS.10).aspx If you have any questions or concerns, please do not hesitate to let me know.

thank you for the suggestion!!!I also have one more question. This is our only enterprise CA that only issues domain controller certficates. I want it to be HA/redundency. What is the best approach to setup a redundency CA for my scenario?thanks

Hello, Thanks for the update. To provide redundancy for a CA Server, you may refer to the following document about how to create CA clustering to provide an additional level of reliability to Certificate Service. Certification Authority Clustering Configuration and Troubleshooting Guide http://technet.microsoft.com/en-us/library/cc742517(WS.10).aspx If you have any questions or concerns, please do not hesitate to let me know.