Blog Post

ITOps Talk Blog
6 MIN READ

Step-By-Step: Migrating The Active Directory Certificate Service From Windows Server 2003 to 2012 R2

AnthonyBartolo's avatar
AnthonyBartolo
Icon for Microsoft rankMicrosoft
Dec 27, 2018
Support for both Windows Server 2003 and 2003 R2 ended on July 14 th , 2015, and yet there are still several organizations operating their businesses on it. There are still a vast number of IT profes...
Updated Jul 09, 2021
Version 13.0
anthony bartolo
Windows Server
JesseShanks's avatar
JesseShanks
Copper Contributor
Jul 10, 2019

AnthonyBartolo Thank you for putting these guides together for everyone!! I have a question regarding upgrading our 2003 CA. We're an enterprise organization with a LOT of servers and workstations. We have an on-prem Exchange deployment as well as many other MS services that use the CA. Will migrating to a new server cause any issues for the currently leased certificates? Will we have to reissue every certificate the CA has authority over or will the migration be seamless, even though the new server will have a new hostname and all that? What about Exchange and Skype for Business servers? Will they know to use the new CA server automatically or is there manual intervention after the CA migration?

What I'm trying to find out is how much work will be required after the CA has been migrated. What will I need to be careful with and what will I need to do to ensure all of our current services do not go offline with SSL problems?


Thanks again!!