This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(268.8, 65%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
We have a Root CA that's going to expire soon but I don't have the option to renew it when I go to All Tasks.
The environment we are using is Windows Server DataCenter 2016 Core. Please keep in mind that our Certificate Server is Server Core which means I don't have a GUI which is another issue because all tutorials online state the solution in GUI mode!!!!
I Looked up countless tutorials which all say "in GUI Windows Server, right click your CA and select "All Tasks" and then select "Renew Certificate CA" but I can't see that anywhere.
Please help!!
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 96%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EFF%3C/text%3E%3C/svg%3E)
Hi，
I am checking to see if the problem has been resolved.
If there's anything you'd like to know, don't hesitate to ask.
Best Regards,
Hi,
Based on my understanding , on a server core, not only the CA ,there is no GUI for other roles either.
To renew the CA certificate, we need to use the command :
Command:Certutil -renewCert ReuseKeys renews the CA with the existing key pair
Command:Certutil -renewCert renews the CA with a new key pair
More information for your reference:
https://learn.microsoft.com/en-us/windows/win32/seccrypto/certification-authority-renewal
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/cc732443(v=ws.11)?redirectedfrom=MSDN
Best Regards,
And I'm guessing I would need to execute this command on the Server (Host) itself right? Do I also need to be signed in as an administrator in a Domain Controller environment? If so, then what type of administrator ?
Hi,
If the root ca in a domain member, you can use both the local administrator and the domain administrator.
Best Regards,