I
ITGIRLFNB
I have a 21012 R2 Domain Controller that is also my CA and I'm trying to move it to my new 2016 DC. When I backup the CA I get the message "Windows cannot backup one or more private keys because the CSP does not support key export." I say yes to continue the backup. Then when importing it on my 2016 I get the message "The imported certificate does not match the CA type and will not be used. However, the imported key can still be used." I've tried it as Enterprise and Standalone but both give the same error. I know it's a Root CA as I only have 1. It's been several years since I built the 2012 CA so I don't remember much about the setup of it. I do know that 2 of 3 certificates show the Private Key is NOT exportable and I apparently do not have a backup of the private key. So, is there a way to get past this or am I going to have to start over from scratch on the 2016? Any help with this is greatly appreciated!
Continue reading...
Continue reading...