Share via

certificate renewal from new CA server

Hasini 1 Reputation point
Jul 29, 2021, 5:09 AM

We have a new CA server (side by side ) deployed with old CA server .
currently we have some server certificates issued by Old CA server in production
I want to know if there is a cleaner way to issue new certificate from new CA server to an existing server\computer currently using certificate from old CA.

goal is to have minimum downtime

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
13,714 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Daisy Zhou 29,481 Reputation points Microsoft Vendor
    Jul 29, 2021, 7:00 AM

    Hello @Hasini ,

    Thank you for posting here.

    Here is the answer for your reference.

    Q: if there is a cleaner way to issue new certificate from new CA server to an existing server\computer currently using certificate from old CA.
    A: Based on the description, the new CA server and the old CA server are in the same domain.

    Please refer to the steps below.

    1.Please give the read and enroll permissions to the existing servers\computers (this should be done, because you have issue certificate to these servers\computers from old CA).

    For example:

    118886-cert1.png

    2.Please issue the same certificate template to new CA server.
    Logon new CA server with domain Administrator account and open Certification Authority. Right click Certificate Template container->New->Certificate Template to Issue.

    For example:
    118965-cert2.png

    3.Log on the server\computer using Administrator account (local admin or domain Admin) and issue new certificate from new CA server (I assume you want to issue machine certificate).

    4.Type certlm.msc and click Enter.

    5.Right click the Certificates under Personal->right click Certificates->All Tasks->Request new certificate->Next ->Next ->Select new CA server as below.

    118919-cert3.png

    118887-cert4.png

    Hope the information above is helpful to you.

    Should you have any question or concern, please feel free to let us know.

    Best Regards,
    Daisy Zhou

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    1 person found this answer helpful.
    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.