Windows 2003 Certificate Authority CA to 2012 R2 and decommission old

Y

yomammaone

I have inherited an environment with an old CA running on a 2003 standard. It is also a domain controller that I need to demote.. However, it has Certificate services installed on it so I can not demote it until that services is removed. I have little documentation on the environment and my fear is that some machine or web service may still be using it.

I have a server 2012 R2 box that is a DC that I plan on installing as the new Certificate Services CA for the domain.

If I look in the Add/Remove Windows components, the Certificate Services CA and the Certificate Web Enrollment support are installed. **Also within the Certificate Authority - Issued Certificates there are only 11 active certs and most are to users or pcs. There are 3 that are Domain Controller and one Web Server template

Can I break anything by removing these? The plan is to decommission the 2003 and migrate the CA that would go on the Server 2012 R2 box

Thank you for any advise you can give especially on the PROPER ORDER :)

Continue reading...
 
Back
Top Bottom