|
Posted by Brian Komar on July 24, 2007, 8:35 am
Please log in for more thread options
There is nothing that stops you from putting two enterprise CAs on the
network.
But....
You cannot take an existing enterprise CA offline without converting it to a
standalone CA
The enterprise CA configuration depends on AD and cannot be removed from the
network
I would look at the Best Practices whitepaper available at
www.microsoft.com/pki for some insight on setting up CA hierarchies.
You look like you are moving from a one-tier to a two-tiered CA hierarchy
Brian
> Hello All,
>
> I upgraded our Enterprise CA from Windows 2000 CA to Windows 2003
> Standard and it now refuses to issue certificates. Is it possible to
> set up another CA on a 2003 Enterprise box and have them online at the
> same time? While I can't find documentation that recommends having
> two CAs, I can't find anywhere that warns against it either.
>
> Ideally, the new CA would start issuing certs, which would eventually
> allow us to take the original box offline eventually. Oh, the 2003
> Enterprise box is already in production, so renaming it isn't an
> option.
>
> Any insight or proposed soultions would be much appreciated.
>
> Cheers,
> Brent
>
| 
XML Sitemap