Need some technical clarification on the below scenario. Assume Windows 2003 to windows 2008 R2 PKI migration. I have windows 2k3 SP2 of one Root CA which is in offline and one Subordinate CA of windows 2k3 SP2 which is responsible for issuing certificate. Question 1: Do I need to upgrade the Root CA? is it mandatory? If yes what operation I need to do? Question 2: my Subordinate CA is a member server? How can I use the same host name for the new 2008 Server? Do I need to remove from domain and then add the new server? (can you provide the steps for migration. Question 3: For changing new host name to my 2008 server what steps I need to follow?

> Do I need to upgrade the Root CA? is it mandatory? no, this is not mandatory. > my Subordinate CA is a member server? How can I use the same host name for the new 2008 Server? Do I need to remove from domain and then add the new server? (can you provide the steps for migration. this link should help you: http://technet.microsoft.com/en-us/library/ee126170(WS.10).aspxMy weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com