CA migration

Question

Hello, I have a DC server that contains the role of Certificate Authority (CA).

I want to de-promote this server to a domain member server.

If I de-promote the server:

Will the CA configuration be kept?

In case I have to migrate it to a new server:

Can the new server where the CA is going to be imported have another computer name different from the one the CA had before or does it have to have the same name as the previous CA server?

Is there any manual to migrate to another server?

Thanks

Translated with DeepL.com (free version)

Answer 1

Hi

Raul Guchinife,

Thank you for posting in the Q&A Forums.

If you want to keep the CA configuration, you must back up the CA configuration before downgrading the domain control. back up the CA configuration. Then remove the CA role, downgrade the DC again, then reinstall the CA role, and finally restore the CA configuration. This series of operations is quite complicated, so we suggest you find professionals to operate offline, or remote online guidance.

Regarding the name, there is no restriction requirement.

For server migration, you just need to copy the relevant CA configuration backup files to the new server then install CA and restore the configuration.

Best regards

NeuviJ

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.