Windows 2000 subordinate CA ---> 2003

[Mark Bohlsen]

I have a Windows 2000 subordinate CA in my domain that I want to upgrade to
2003. I would like to create a VMware virtual Windows 2003 virtual server
and make it my CA because the physical hardware is old. Is this possible
without upgrading the 2000 server to 2003? If it's not possible and I have
to upgrade the exisiting server to 2003 along with certificate services, what
steps do I take to make sure I have proper backups of my CA that are required
if the upgrade does not go well for some reason? Any help would greatly be
appreciated.

 

[S. Pidgorny]

1. Is it possible without upgrade to Windows 2003? Yes, this is a
physical-to-virtual migation. Can use VMWare Convertor, for example.
2. How to upgrade? Can do in-place upgrade, keeping all settings:
http://support.microsoft.com/kb/938496

If you use HSM, there will be specifics. Plan carefully, allow for rollback,
test.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

"Mark Bohlsen" <MarkBohlsen@discussions.microsoft.com> wrote in message
news:87F86823-DE58-4477-BCA3-E9639C4E641E@microsoft.com...
>I have a Windows 2000 subordinate CA in my domain that I want to upgrade to
> 2003. I would like to create a VMware virtual Windows 2003 virtual server
> and make it my CA because the physical hardware is old. Is this possible
> without upgrading the 2000 server to 2003? If it's not possible and I
> have
> to upgrade the exisiting server to 2003 along with certificate services,
> what
> steps do I take to make sure I have proper backups of my CA that are
> required
> if the upgrade does not go well for some reason? Any help would greatly
> be
> appreciated.