Removing the last and only enterprise CA?
Hi,we are about to decomission few servers and one of these happens to be a Enterprise Certificate Authority. There is a article on microsoft.comon how to do it, but I have little experience on CAs, so I'm worried about what repercussions this might have on the rest of the servers, if any.Will there be problems with the other servers (Exchange, Sharepoint, SQL, AD, etc.)? If I understood it correctly, (atleast) AD servers aquire certificates automatically from this CA.The CA is "not" in use, it has automatically issued some certificates, but other than those, we haven't used it. The root certificate has also expired. The CA has also AD installed and its running Windows 2003 std. The CA is the only one in the environment and we aren't planning on installing a new CA (unless required).So, can we safely uninstall the CA with those instructions and what's the risk of breaking every thing else?Thanks,Petrus
July 21st, 2009 8:23am

Hi, After you follow the article KB889250 to decommission the CA, all certificates issued by this CA cannot be used any longer. The certificate installed on DC is mainly used for LDAP over SSL communication. You can delete the certificate, if LDAPs is not required. Actually, as you did not use certificate at all, I think it is safe to remove the CA server. To further confirmif the operation will affect other servers (Exchange, SharePoint, SQL), you can initial a new thread in the following forum accordingly: Exchange Forum http://social.technet.microsoft.com/Forums/en-US/category/exchangeserver SharePoint Forum http://social.msdn.microsoft.com/Forums/en-US/category/sharepoint SQL Forum http://social.msdn.microsoft.com/Forums/en-US/category/sqlserver Thanks.
Free Windows Admin Tool Kit Click here and download it now
July 22nd, 2009 12:28pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics