Migrate Enterprise root authority CA to stand-alone root CA

V

Vlad Nevsky

Hi All!
Is it possible migrate Enterprise root CA to stand-alone root CA?
I know that vice versa migration is possible:
http://www.microsoft.com/technet/pr...2003/technologies/security/ws03pkog.mspx#ERAA

What steps needed?
We have one enterprise root ca and 3 subordinate CA and many issued
certificates. We want go offline rootCA and keep existing SubCA with current
certificates without entire replacing PKI.
My probably plan:
1. Backup CA keys.
2. Stop CA service.
3. Delete server from domain.
4. Disconnect server from network.
5. Deinstall Enterprise root CA.
6. Install stand-alone root CA on this server with keys from backup.
7. Connect to network.

Any information is appreciated.

Best regards,
Vladislav Usik aka Vlad Nevsky
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Stand-alone root CA 3
Isolation of the Root CA 6
Why enterprise root CA automatically isue certificates. 5
Windows 2003 Enterprise CA & Restored State 1
can`t Install enterprise subordinate ca on domain controller 1
Cert Authority--Enterprise Stand Alone or both? 3
Changing the AIA and CDP for an Issuing CA 0
Move Enterprise Root CA to new hardware 2

Top