convert subordinate CA to Root CA
Hi, may be a silly question, but the previous admin was fired and he leave me all problem, I'm working on fixing the problems, one of them is that he was lost the root CA (no backup - Windows 2003 standard) and i have only a subordinate CA (Windows 2008 standard). How can i convert this subordinate CA to root Ca ? or i have to install a new root CA? tks for your help. i hope can be. migradation
July 30th, 2010 1:41am

The Root CA should never have network access so it would be a bad idea altogether. Not to mention I don’t think it is possible to promote an issuing CA to a Root CA. Instead, why not create a parallel instance? Your existing clients will continue to function and you can slowly migrate everyone over to the new infrastructure.
Free Windows Admin Tool Kit Click here and download it now
July 30th, 2010 2:34am

you cannot convert subordinate CA to root CA and vice versa. You will have to rebuild your PKI from scratch.http://en-us.sysadmins.lv
July 30th, 2010 8:57am

thanks for your suggestions. i think the better is create a parallel instance.migradation
Free Windows Admin Tool Kit Click here and download it now
July 30th, 2010 5:48pm

> Your existing clients will continue to function until Root CA CRL will expire. After that many applications will reject current PKI certificates, becuase they will unable to perform revocation checks. http://en-us.sysadmins.lv
July 30th, 2010 7:20pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics