Root CA migration from 2012 R2 to 2019

Question

Root CA migration from 2012 R2 to 2019

Arnold MIshaev 216

Hi everyone,

In our environment we have 4 DCs, three DCs writeable including GC, and one is read-only which also include GC.
the environment is one forest and one domain.
all domain controller in the same site.

in one of the writable DC we have the Root CA which installed on server 2012 R2, we would like to migrate Root CA to the new windows server 2019 which would include only CA role.
and demote the server 2012R2 DC from the domain.

we could separate the CA from DC and install it on new server which include only CA role?

we would be grateful to get some suggestion or KBs migration guide.

Accepted answer

0 additional answers

Your answer

Answer 1

Hi there,

I have found this thread which provided a detailed description of the steps to perform. Here are some documents talking about AD CS migration. Hope they could be helpful to you.

Performing the Upgrade or Migration
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc742388(v=ws.10)?redirectedfrom=MSDN

AD CS Migration: Migrating the Certification Authority
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/ee126140(v=ws.10)#BKMK_GrantPermsAIA

Step-By-Step: Migrating The Active Directory Certificate Service From Windows Server 2008 R2 to 2019
https://techcommunity.microsoft.com/t5/itops-talk-blog/step-by-step-migrating-the-active-directory-certificate-service/ba-p/697674

Migrate Enterprise Root CA from Windows 2012 R2 to Windows 2019
https://learn.microsoft.com/en-us/answers/questions/166693/migrate-enterprise-root-ca-from-windows-2012-r2-to.html

--------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer--

Share via

Root CA migration from 2012 R2 to 2019

0 additional answers

Your answer