Tech Support > Microsoft Windows > Security & Administration > Migrate Enterprise root authority CA to stand-alone root CA
Migrate Enterprise root authority CA to stand-alone root CA
Posted by Vlad Nevsky on December 13th, 2005


Hi All!
Is it possible migrate Enterprise root CA to stand-alone root CA?
I know that vice versa migration is possible:
http://www.microsoft.com/technet/pro...pkog.mspx#ERAA

What steps needed?
We have one enterprise root ca and 3 subordinate CA and many issued
certificates. We want go offline rootCA and keep existing SubCA with current
certificates without entire replacing PKI.
My probably plan:
1. Backup CA keys.
2. Stop CA service.
3. Delete server from domain.
4. Disconnect server from network.
5. Deinstall Enterprise root CA.
6. Install stand-alone root CA on this server with keys from backup.
7. Connect to network.

Any information is appreciated.

Best regards,
Vladislav Usik aka Vlad Nevsky



Similar Posts