Share via

InPlace Upgrade CA server 2012 to 2016

Namless Shelter 231 Reputation points
2021-09-20T04:56:50.513+00:00

Hi There, please help..

We have an old CA server running windows 2012. I am planning to do a In-Place upgrade: run a Windows installer 2016 installer and upgrade directly on CA01 server (Win server 2012), and finished the upgrade process on the same box. So, IP, Hostname Root CA name etc will be the same....Is this totally a OK thing to do? Any potential issues?

Also, If I migrate Root CA properly to a complete new server 2019 box, CDP entries and etc will be updated automatically after I import the backup files and reg etc?

Guide I would follow; https://techcommunity.microsoft.com/t5/itops-talk-blog/step-by-step-migrating-the-active-directory-certificate-service/ba-p/697674

Thanks a lot,
Nameless

Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,782 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Limitless Technology 39,511 Reputation points
    2021-09-20T13:46:17.817+00:00

    Hello,

    Thank you for your question.

    It should be fine as far as your Windows 2012 to 2016 OS upgrade is successful and without any issues.
    Please take backup of this VM before any migration and upgrade also uninstall any Antivirus software before OS upgrade.

    If the reply was helpful, please don’t forget to upvote or accept as answer.

    0 comments
  2. Limitless Technology 39,511 Reputation points
    2021-09-20T17:54:31.353+00:00

    Hello again @Namless Shelter

    Additionally,

    In-Place upgrade for CA may work but is not recommended as there are many issues reported from users after that operation. the recommendation would be Migrating the CA between the "old" server and "new" server.

    There is a previous thread with this question, you can read more about ir here: https://learn.microsoft.com/en-us/answers/questions/480188/ca-server-in-place-upgrade-from-server-to-server-2.html

    Also I have found this guide with some step by step and screenshots that may be helpful for you: https://techcommunity.microsoft.com/t5/itops-talk-blog/step-by-step-migrating-the-active-directory-certificate-service/ba-p/697674

    Hope this is useful for you,
    Best regards,