Blog Post

ITOps Talk Blog
4 MIN READ

Step-By-Step: Migrating The Active Directory Certificate Service From Windows Server 2008 R2 to 2019

AnthonyBartolo's avatar
AnthonyBartolo
Icon for Microsoft rankMicrosoft
Jun 18, 2019
End of support for Windows Server 2008 R2 has been slated by Microsoft for January 14th 2020.  Said announcement increased interest in a previous post detailing steps on Active Directory Certificate ...
Updated Jul 09, 2021
Version 9.0
Anthony Bartolo
Windows Server
MCroom's avatar
MCroom
Copper Contributor
May 29, 2020

AnthonyBartolo  Thanks for the post. Paul_Adare  thanks for the additional comments. It is nice to see that there are fresh replies to the comments for us "late upgraders" 🙂

 

I still need to embark on upgrading our offline root CA and single subordinate CA from 2008r2 and need to do this soon. I have a couple of questions if you are able to answer them?

 

1) Will there be any downtime associated with performing this migration? The CRL will be down while we perform the upgrade.

2) We are thinking about adding additional availability to our CA infrastructure. Should we do this at the same time?

3) Is it recommended to separate the AIA and CDP locations away from the issuing servers? Can we also do this as part of this process (if necessary).

 

I think i am adding too much complexity to this process and just need to concentrate on getting the migration done first.

 

Regards,

 

Mark