Quantcast
Channel: Security forum
Viewing all articles
Browse latest Browse all 12072

Certificate Service Migration

$
0
0

I have a PKI in Windows Server 2003:

1. A Stand-Alone Root CA - "Offline" - "Windows Server 2003 x32 Enterprise Edition".

2. An Enterprise Subordinate CA - "Online" - "Windows Server 2003 x32 Enterprise Edition".

I want to migrate this PKI to Windows 2008:

1. A Stand-Alone Root CA - "Offline" - "Windows Server 2008 Standard Edition".

2. An Enterprise Subordinate CA - "Online" - "Windows Server 2008 Enterprise Edition CA Cluster".

 I have already prepared the plan for Root CA migration by following the below link:

http://blogs.technet.com/b/xdot509/archive/2011/11/18/upgrading-your-pki-from-windows-server-2003-to-windows-server-2008-r2-part-iii-upgrading-standalone-certification-authorities-offline-root-cas-offline-policy-cas.aspx

I need help in preparing the plan for Online Subordinate CA to Windows 2008 Certificate cluster. I am having confusion regarding the naming which I need to use while building CA cluster.

In the present CA server there are 2 names which are used. One is Hostname which is "CAserver1" and in CA console the CA instance name is "IssuingCA".

When I will prepare CA server clusters what will be name which I will have to use for Nodes, What will be the name of cluster and is there any other name to be used in CA cluster.

It will be great help if anyone can help me with the CA migration guide from standalone to Cluster.


Viewing all articles
Browse latest Browse all 12072

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>