Migrate Enterprise root authority CA to stand-alone root CA

  • Thread starter Thread starter Vlad Nevsky
  • Start date Start date
V

Vlad Nevsky

Hi All!
Is it possible migrate Enterprise root CA to stand-alone root CA?
I know that vice versa migration is possible:
http://www.microsoft.com/technet/pr...2003/technologies/security/ws03pkog.mspx#ERAA

What steps needed?
We have one enterprise root ca and 3 subordinate CA and many issued
certificates. We want go offline rootCA and keep existing SubCA with current
certificates without entire replacing PKI.
My probably plan:
1. Backup CA keys.
2. Stop CA service.
3. Delete server from domain.
4. Disconnect server from network.
5. Deinstall Enterprise root CA.
6. Install stand-alone root CA on this server with keys from backup.
7. Connect to network.

Any information is appreciated.

Best regards,
Vladislav Usik aka Vlad Nevsky
 
Back
Top