About
Scott Feltmann is a Premier Field Engineer at Microsoft Corporation specializing in Microsoft Exchange. He has been in the IT industrty for over ten years working in various roles during that time.
His certifications include:
MCITP: Enterprise Messaging Administrator 2007, 2010
MCTS: Exchange 2010
MCTS: Exchange 2007
MCTS: Microsoft Office SharePoint Server 2007
MCTS: Microsoft Office Communication Server 2007
Have a question on a 2003 root CA on a DC migration to a 2008 member server. My migration was from a server with a different name than the destination. I’ve followed the doc you had as well as some other pointers from it and I have gotten it up and running. Certificates are being requested and they work. I then requested a renewal for the root CA cert.
I’ve got at least two issues I deem as minor.
1. The root ca now still has name references to the old server.
2. The website appears to work except for the download a ca certificate, certificate chain or CRL. That link gives an error of Certificate Authority service is not started, which of course it is. So I am wondering if because I have yet to import this into AD that this is why I am getting that error. I was able to export the CA cert from the CLI, just haven’t figured out how to import it into AD.
I’m assuming the old server name will remain, however I am wondering if this might be causing some of my issue.
It is likely the server name. When moving to a server with a different name there are additional steps you have to take to make the change.
Take a look at this article. It takes the steps a bit further than my article because it is moving the CA to another server name: http://smtpport25.wordpress.com/2010/01/16/migrating-windows-certificate-authority-server-from-windows-2003-standard-to-windows-2008-enterprise-server/