We have an Enterprice Root CA running on W2003. I've to install the second Enterprise Root CA in the same organization on W2008R2. I already tested it in a lab and I can manually request certificates to both CA, both work from a client. The thing is I have to make sure all new certificates are being requested to the new Root CA and issued by that one as well, while the old one is still running. How can we do that ?

On Tue, 21 Jun 2011 11:05:30 +0000, vcnz wrote: The thing is I have to make sure all new certificates are being requested to the new Root CA and issued by that one as well, while the old one is still running. How can we do that ? Remove all published certificate templates from the current Enterprise Root CA and publish the ones you need at the new Enterprise Root CA. Paul Adare MVP - Identity Lifecycle Manager http://www.identit.ca A computer scientist is someone who fixes things that aren't broken.