I recently migrated my CA role to a new server. I had successfully done it in a lab environment following the TechNet documentation and it works fine. I go to do it on my live environment and run into this issue.
First when attempting to issue a new cert my new CA was not even showing up, I found that it was missing under "CN=Enrollment Services" so I created a new object for it following the instructions listed on the 3rd post here:
Now, it seems to be detected, but it is greyed out and I cannot find a way to let issue certificates, not sure where else to look at this point, any suggestions? thanks