Good Afternoon.
I am planning on migrating my current 1 tier CA to another VM and using a 2 tier PKI configuration. The current CA is running on a DC/GC that also has NPS installed on it for Wireless Authentication.
I have been reading this guide for the correct procedure: https://social.technet.microsoft.com/wiki/contents/articles/21076.upgrading-the-pki-from-windows-server-2008-r2-to-windows-server-2012-different-host-name-part-1.aspx
The only problem I have is that I cannot shutdown the old CA after migration to another CA server because it is a DC. If I were to disable the CA service on the DC and point NPS to the new CA would I still be able to go ahead with the migration? After I confirm the new CA is handing out certificates as well as verifying my current certificates I will remove the CA role from the old DC and worry about moving NPS.
Does anyone know if I am able to do this or must I shutdown the old CA completely after migration?
Regards,
Antony N.