Click here to get back home

Re: Move Enterprise CA server

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Re: Move Enterprise CA server Paul Bergson [MVP-DS] 12-18-2007
Posted by Paul Bergson [MVP-DS] on December 18, 2007, 8:48 am
Please log in for more thread options

> Hello all
>
> I am following kb article 298138 in order to move CA to another DC. I have
> tested this out succesfully in a lab environment when the source server
> and
> target server are both Windows 2003 sp1. in production the CA enterprise
> server is an upgrade from NT so the registry for the CA settings points
> to.
> Abviously the target DC location for these settings is
> C:\windows\system32\certlog. In KB 298138 it says that i must modify the
> path
> in the registry from the source servers export so that it matches default
> location where certificate services is installed on the target server. I
> guess all I need to do then is modify "C:\WINNT\system32\CertLog" to
> "c:\windows\system32\certlog" can anyone confirm this?
>
> DBDirectory"="C:\WINNT\system32\CertLog"
> "DBLogDirectory"="C:\WINNT\system32\CertLog"
> "DBTempDirectory"="C:\WINNT\system32\CertLog"
> "DBSystemDirectory"="C:\WINNT\system32\CertLog"

This may be best answered by the folks in the security newsgroup. I have
copied them in on this post.


--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.



Posted by Brian Komar on December 18, 2007, 9:45 am
Please log in for more thread options
Just before we go too far down this trail.

Did you follow see this note...
Note The new server must have the same computer name as the old server.

I question this since you are stating that you are moving the CA to "another
DC"
If it does not have the exact same domain membership and NetBIOS name, then
you cannot move the CA.

Brian

>
>> Hello all
>>
>> I am following kb article 298138 in order to move CA to another DC. I
>> have
>> tested this out succesfully in a lab environment when the source server
>> and
>> target server are both Windows 2003 sp1. in production the CA enterprise
>> server is an upgrade from NT so the registry for the CA settings points
>> to.
>> Abviously the target DC location for these settings is
>> C:\windows\system32\certlog. In KB 298138 it says that i must modify the
>> path
>> in the registry from the source servers export so that it matches default
>> location where certificate services is installed on the target server. I
>> guess all I need to do then is modify "C:\WINNT\system32\CertLog" to
>> "c:\windows\system32\certlog" can anyone confirm this?
>>
>> DBDirectory"="C:\WINNT\system32\CertLog"
>> "DBLogDirectory"="C:\WINNT\system32\CertLog"
>> "DBTempDirectory"="C:\WINNT\system32\CertLog"
>> "DBSystemDirectory"="C:\WINNT\system32\CertLog"
>
> This may be best answered by the folks in the security newsgroup. I have
> copied them in on this post.
>
>
> --
> Paul Bergson
> MVP - Directory Services
> MCT, MCSE, MCSA, Security+, BS CSci
> 2003, 2000 (Early Achiever), NT
>
> http://www.pbbergs.com
>
> Please no e-mails, any questions should be posted in the NewsGroup
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>


Similar ThreadsPosted
move enterprise root ca September 13, 2006, 8:09 am
file server move from win2000 to win2003 April 24, 2008, 9:50 pm
How to not allow user move folders accidentially in MS server 2003? January 31, 2008, 4:33 am
Enterprise CA server dead. August 2, 2007, 5:30 pm
Upgrade CA server from W3K to W3K enterprise ? March 5, 2008, 12:58 am
HELP for Vista on Server 2003 Enterprise March 3, 2008, 4:39 pm
Auto cert enrollment without an Enterprise Server June 19, 2006, 2:45 pm
Windows 2003 enterprise CA issues - RPC server is unavailable. February 12, 2008, 3:27 am
Issuing Version 2 templates with Web Enrollment pages (Windows Server 2003 Enterprise) October 14, 2005, 11:58 am
Move CertServices to a new DC May 31, 2005, 2:03 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap