I have a domain controller that also has a CA installed on it. We are going to replace the hardware soon. I would like to remove the CA from the domain altogether because it is not really needed. If I do remove the CA, will this affect users who are logging into the domain? I do see certificates being issued to some computers, and the other two domain controllers in the domain. Also is there a good document that has step by step instructions for removing a CA? Thanks.

http://support.microsoft.com/kb/889250My weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com

Hi Customer, You could remove CA if no application(IAS, VPN) based on certificate. You also could back up CA for safety before remove it. You just need to reinstall CA when you want to use it in the future. You could refer to below thread. Backing up and restoring a certification authority http://technet.microsoft.com/en-us/library/cc779540(WS.10).aspx Certificate Services won't start http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/7508faa2-448e-423b-80cd-b116cfba8db8 Regards, Rick Tan

I just want to confirm, that if I de-commission the CA using kb889250, that the domain controllers and other computers that are currently getting certificates will not be adversely affect? Thanks.

if certificates are not used, there shouldn't be any issues.My weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com