You have to properly migrate your CA using official ADCS Migration Guide: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn486797(v=ws.11)
CA Subordinate
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(96, 33%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERG%3C/text%3E%3C/svg%3E)
Raul Guchinife
140
Reputation points
Hello
I have configured a main CA and a subordinate CA that depends on this one.
The main CA I have to cancel it, since the server where it is hosted has to be shut down. I have created another new main CA and I have been passing the certificates that the old CA had to the new one.
The doubt I have is with the subordinate CA, what will happen to it when I turn off the server of the current main CA? Can it be passed to the new main CA?
Greetings
Windows for business | Windows Server | User experience | Other
Windows for business | Windows Server | Devices and deployment | Configure application groups
1 answer
Sort by: Most helpful
-
Vadims Podāns 9,266 Reputation points MVP2023-05-12T12:17:29.7633333+00:00 -
Raul Guchinife 140 Reputation points
2023-05-15T14:58:27.19+00:00 The new main CA is already functional with the issued certificates.
I only have the subordinate CA that I have depending on the old one.
When I delete the old CA, will the subordinate CA stop working?
Is it possible to change the subordinate of the old CA to subordinate of the new CA?
Thanks
Sign in to comment -