Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,179 questions
Certification Authority - Turning Off Old CA Server breaks Kerberos and SCCM
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(220.8, 34%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
jm
0
Reputation points
I am switching my company to a new Certification Authority server.
The new one (CA2) is configured as a host and I copied the settings over from the old one (CA1), so any changes on one occur on both. However, whenever I take the old one offline, users lose access to Windows Hello sign in options (PIN, fingerprint). I have a laptop I have newly added to the domain that I have blocked the IP of the old CA, CA1, on this device to test it. It is able to get the SCCM certificate from CA2, but it isn't downloading Software Center, and the Windows Hello login features are unavailable. Am I missing something here?