Guest Peter Posted December 5, 2007 Posted December 5, 2007 We wish to remove and replace our current W2K3 CA. We are in the process of replacing our DCs and don't wish to migrate, but rather start again. The only issued certs we have are for the DCs and these appear to be auto-enrolled as well as the root cert itself. Can we revoke these certs, revoke the root cert, uninstall CA and clean up AD objects without damaging AD? We would then propose to install a new root authority back into the same AD on a new DC. Would appreciate any advice or warnings regarding this approach. -- Cheerss, Peter
Guest Meinolf Weber Posted December 5, 2007 Posted December 5, 2007 Re: Replace Certificate Authority Hello Peter, Chekc out this one: http://support.microsoft.com/kb/298138 Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm > We wish to remove and replace our current W2K3 CA. > We are in the process of replacing our DCs and don't wish to migrate, > but > rather start again. > The only issued certs we have are for the DCs and these appear to be > auto-enrolled as well as the root cert itself. > Can we revoke these certs, revoke the root cert, uninstall CA and > clean up > AD objects without damaging AD? > We would then propose to install a new root authority back into the > same AD on a new DC. > > Would appreciate any advice or warnings regarding this approach. >
Recommended Posts