PKI - CA (Certification Authority): IssuingCA Database Backup

Question

Good evening guys,

I have three virtual IssuingCA Servers which are backed up every night. However, the CA databases are not backed up periodically and I would like to organize a daily backup in a specific Repository. Would it be possible through Microsoft tools or Script with Schedule Task? Is there a Best Practice and procedure?

Is it possible to schedule a Full and Incremental backups?

I haven't found any good solutions at the moment.

Thanks in advance,

Alessio.

Answer 1

Use PowerShell

https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/component-updates/ca-backup-and-restore-windows-powershell-cmdlets

---

hth

Marcin

Answer 2

Hello 49885604,

Thank you for posting in Q&A forum.

There is a script that will back up your CA files in the following link, you can try it in lab. If it works fine, then you can schedule the script to run every day using Windows Task scheduler and then pull those files to another location.

For more information, please read the link below.

https://blog.ahasayen.com/certification-authority-backup/

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.

Best Regards,

Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.