Share via

What is the best way to migrate an Offline Root CA to Azure?

Samson Barasa Wanjala 0 Reputation points
2024-05-07T04:04:56.6766667+00:00

I have an offline root CA in my on-premises environment. I also have an Issuing CA. I want to move this infrastructure to the cloud and have an IPSec tunnel connecting back to on-prem infrastructure. I plan to rebuild the Issuing CA in Azure rather than migrating/replicating it. However, I am not sure of the best way to migrate the Offline root CA. Should I export the VHD to Azure and build a new machine using it? Should I bring it online and replicate it to Azure? Or what should I do?

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,451 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Carlos Solís Salazar 17,976 Reputation points MVP
    2024-05-07T20:18:26+00:00

    In your case, I would use Azure Migrate, https://learn.microsoft.com/en-us/azure/migrate/migrate-services-overview.
    You create a process server on your on-premises infrastructure and this server has access to the internet. This server must have communication with the Root Server. Yes, you must have online access during the replication.

    Hope this helps!

    Remember to accept the answer if it is helpful.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.