Replacing an enterprise root certificate server

  • Thread starter Thread starter Dale
  • Start date Start date
D

Dale

Is there any implications to replacing the enterprise
root cert. server and setting up a new cert server?
 
You will need to figure out how you are going to deal with the certificates
issued by the previous cert server. You can revoke them all and issue a
long-lived CRL (CRL should be good until the CA would have expired). If you
want to handle this more "real time" then you will need to have access to
the CA to revoke certificates and issue CRLs.
 
Back
Top