Moving SCCM to new Root CA

Lazher YAAKOUBI 381

Hi,

I plan to remove and reconfigure Root CA in my environment, the SCCM infrastructure uses a PKI, so my question, if I remove the Root CA server and configure another one, I need to configure the SCCM environment with a new certificate from the new root CA or I have to use some other method to do it.

Thanks.
A+

1 answer

Jason Sandys 31,196 Reputation points Microsoft Employee

2021-09-20T03:17:07.287+00:00

You can have multiple root CAs to help facilitate a slower transition. The root CA configured ion the client communication tab of the site is used for client cert selection and this CA is also added as a trusted root on devices going through OSD.

What's happening to old root CA?
Please sign in to rate this answer.

1 person found this answer helpful.
Lazher YAAKOUBI 381 Reputation points

2021-09-20T08:42:16.227+00:00

I have some requirements to redeploy a new root CA.

Jason Sandys 31,196 Reputation points Microsoft Employee

2021-09-20T13:55:25.517+00:00

Right, not questioning that but it doesn't answer the question of what's going to happen to the old root CA and when it will happen (if anything)?

Lazher YAAKOUBI 381 Reputation points

2021-09-22T09:02:30.747+00:00

for some requirements I plan to change the configuration of the root CA, in this case, I have to re-deploy it.

Jason Sandys 31,196 Reputation points Microsoft Employee

2021-09-22T13:33:08.857+00:00

That still doesn't answer the question: what will happen to the existing root CA?

Lazher YAAKOUBI 381 Reputation points

2021-09-22T13:57:59.003+00:00

It works but I'm planning to change some configuration
Sign in to comment

Share via

Moving SCCM to new Root CA

1 answer