I am running a Windows Server 2008 R2 domain (at 2008 R2 level). the Enterprise AD Root Certificate Authority runs on the domain controller. So does Exchange 2010. When I installed the Certificate Authority, I must have accepted the default name by mistake for the Certificate Authority, which was "contoso-DCNAME-CA" (I guess I really am as stupid as my ex claims...). Since we create certs for our customers, we would like a better looking CA name. Also, Microsoft itself recomends not having the domain or DC host name in the Root Authority Name. I would like the CA to be named "Contoso Certificate Authority", but do not need/want to change the DC host name or the domain name. How do I do this? I can't seem to find a way to change the name. Must I do an uninstall/reinstall of the CA? What effect will that have on my domain, domain client certs, and my Exchange Server (I am using a commercial cert for Exchange and the Exchnage Web Server, so I assume there'd be no problem). Will the side effects of the reinstall be haunting me for the rest of my natural life? TIA, mlavie

Unfortunately, it is impossible to rename CA name itself. If you want different name, then brand-new CA installation is required. I would advice to setup parallel CA instance on different server (you can't run 2 CA instances on the same server) with new name and try to migrate all existing clients and certificates to a new CA.My weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com Windows PKI reference: on TechNet wiki

Unfortunately, it is impossible to rename CA name itself. If you want different name, then brand-new CA installation is required. I would advice to setup parallel CA instance on different server (you can't run 2 CA instances on the same server) with new name and try to migrate all existing clients and certificates to a new CA.My weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com Windows PKI reference: on TechNet wiki