Folks, is there a way to specify a different CSP (or KSP) when performing a renewal of a CA certificate. The requirement I have is to move from an older 32-bit CSP to a KSP - whilst there may be some trick approach to doing this using utilities provided by the HSM people, we'd be quite happy to use the renewal process to "manage out" the old CSP.
There doesn't appear to be any opportunity when running the "wizard" to renew the CA certificate... neither is there anything in the CAPolicy.inf.
I was thinking about using certreq, but then I don't know what "magic" that would omit compared to running the renewal with the wizard.
Any ideas? Cheers