Home
%3CLINGO-SUB%20id%3D%22lingo-sub-307399%22%20slang%3D%22en-US%22%3ERe%3A%20Step-By-Step%3A%20Migrating%20The%20Active%20Directory%20Certificate%20Service%20From%20Windows%20Server%202003%20to%20201%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-307399%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F113142%22%20target%3D%22_blank%22%3E%40Jon%20Bonner%3C%2FA%3E.%26nbsp%3B%20Different%20server%20names%20can%20be%20used.%26nbsp%3B%20This%20is%20also%20highlighted%20in%20this%20lab%20prior%20to%20Step%201.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-307237%22%20slang%3D%22en-US%22%3ERe%3A%20Step-By-Step%3A%20Migrating%20The%20Active%20Directory%20Certificate%20Service%20From%20Windows%20Server%202003%20to%20201%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-307237%22%20slang%3D%22en-US%22%3E%3CP%3EDoes%20it%20matter%20if%20the%20new%20server%20has%20a%20different%20name%20than%20the%20old%20one%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-307056%22%20slang%3D%22en-US%22%3ERe%3A%20Step-By-Step%3A%20Migrating%20The%20Active%20Directory%20Certificate%20Service%20From%20Windows%20Server%202003%20to%20201%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-307056%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20not%20surprised.%20On%20my%20previous%20job%20we%20only%20got%20rid%20of%20a%20last%202003%20VM%20a%20year%20ago.%20It%20wasn't%20very%20critical%20though.%20But%20when%20i%20was%20leaving%20there%20were%20~15%202008%2FR2%20VM%20servers%20with%20some%20critical%20services%20running%20(although%20inside%20a%20LAN).%20I%20think%20many%20of%20them%20will%20stay%20on%202008%20for%20at%20least%20a%20few%20years%20because%20of%20lack%20of%20IT%20staff%2C%20knowledge%2C%20compatibility%20issues%20and%20lack%20of%20budget%20for%20new%20licenses%20and%20hosting.%20And%20i%20can't%20imagine%20how%20they%20are%20going%20to%20move%20'6%20servers%20heavily%20modificated%20SharePoint%202010%20farm'%20anywhere.%20It's%20not%20that%20these%20problems%20are%20new%20in%20IT%20field.%20We%20have%20dealt%20with%20migrations%20from%20older%20systems%20in%20the%20past%2C%20but%20as%20IT%20becomes%20more%20complicated%20every%20day%20sometimes%20it%20just%20feels%20unbearable.%20Well%2C%20there%20should%20be%20a%20clear%20strategy%20and%20good%20planning%20to%20overcome%20such%20things.%20But%20that's%20another%20topic%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-307047%22%20slang%3D%22en-US%22%3ERe%3A%20Step-By-Step%3A%20Migrating%20The%20Active%20Directory%20Certificate%20Service%20From%20Windows%20Server%202003%20to%20201%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-307047%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F33735%22%20target%3D%22_blank%22%3E%40Oleg%20K%3C%2FA%3E%20agreed%20however%20you'd%20be%20surprised%20the%20amount%20of%20organizations%20(financial%2C%20government%2C%20transportation%2C%20education%2C%20etc)%20that%20are%20still%20based%20on%20Windows%20Server%202003%20looking%20to%20modernize.%20This%20post%20is%20a%20repost%20from%20our%20former%20site%2C%20CANITPRO.NET%2C%20and%20is%20still%20of%20great%20interest%20to%20those%20organizations%20who%20can%20only%20modernize%20at%20a%20snail's%20pace%20due%20to%20regulations%20or%20other%20factors.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EHappy%20to%20write%20about%20any%20challenges%20you%20are%20currently%20facing%20in%20future.%20Just%20let%20the%20team%20know%20what%20topics%20you'd%20like%20to%20see%20covered.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-306998%22%20slang%3D%22en-US%22%3ERe%3A%20Step-By-Step%3A%20Migrating%20The%20Active%20Directory%20Certificate%20Service%20From%20Windows%20Server%202003%20to%20201%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-306998%22%20slang%3D%22en-US%22%3E%3CP%3EThere%20is%20probably%20more%20use%20of%20a%20guide%20migrating%20from%202008%20(or%20R2)%20to%20newer%20versions%20like%202016%2F2019%20as%202008%20should%20be%20widely%20in%20use%20as%20it%20is%20still%20in%20support%20for%20a%20year.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-484418%22%20slang%3D%22en-US%22%3ERe%3A%20Step-By-Step%3A%20Migrating%20The%20Active%20Directory%20Certificate%20Service%20From%20Windows%20Server%202003%20to%20201%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-484418%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F102838%22%20target%3D%22_blank%22%3E%40Anthony%20Bartolo%3C%2FA%3E%20will%20this%20guide%20work%20also%20by%20migrating%202008%20R2%20to%202019%3F%20Thanks...%26nbsp%3B%3CIMG%20id%3D%22smileyhappy%22%20class%3D%22emoticon%20emoticon-smileyhappy%22%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Fi%2Fsmilies%2F16x16_smiley-happy.png%22%20alt%3D%22Smiley%20Happy%22%20title%3D%22Smiley%20Happy%22%20%2F%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-501229%22%20slang%3D%22en-US%22%3ERe%3A%20Step-By-Step%3A%20Migrating%20The%20Active%20Directory%20Certificate%20Service%20From%20Windows%20Server%202003%20to%20201%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-501229%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F328002%22%20target%3D%22_blank%22%3E%40Andrej_Vizvary%3C%2FA%3E.%20Our%20team%20is%20working%20on%20steps%20to%26nbsp%3B%3CSPAN%20style%3D%22display%3A%20inline%20!important%3B%20float%3A%20none%3B%20background-color%3A%20%23f8f8f8%3B%20color%3A%20%23333333%3B%20font-family%3A%20'SegoeUI'%2C'Lato'%2C'Helvetica%20Neue'%2CHelvetica%2CArial%2Csans-serif%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%22%3Emigrate%20from%202008%20R2%20to%202019.%26nbsp%3B%20No%20ETA%20on%20its%20completion%20yet%20but%20I%20will%20share%20its%20publish%20date%20when%20it%20becomes%20available.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-636817%22%20slang%3D%22en-US%22%3ERe%3A%20Step-By-Step%3A%20Migrating%20The%20Active%20Directory%20Certificate%20Service%20From%20Windows%20Server%202003%20to%20201%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-636817%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F102838%22%20target%3D%22_blank%22%3E%40Anthony%20Bartolo%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20looking%20to%20migrate%20from%26nbsp%3B%3CSPAN%3E2008%20R2%20to%202019%20in%20the%20next%20few%20weeks%20-%20do%20you%20have%20an%20ETA%20on%20the%20steps%20needed%3F%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EAlso%2C%20do%20you%20have%20any%20information%20on%20additional%26nbsp%3Bsteps%20(if%20any)%20you%20have%20to%20do%20should%20you%20have%20an%20offline%20root%20CA%20along%20with%20the%20enterprise%20subordinate%26nbsp%3Bone(s)%3F%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFinally%3CSPAN%3E%2C%20I%20am%20trying%20to%20get%20it%20clear%20in%20my%20head%20how%20I%20ensure%20the%20old%20issues%20certificate%20remain%20valid%20when%20the%20CRL%20expires%20or%20is%20the%20answer%26nbsp%3Byou%20need%20to%20reissue%20them%20all%20prior%20to%20the%20CRL%20expiring%3F%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EThanks%20for%20your%20help%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EEdd%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-648900%22%20slang%3D%22en-US%22%3ERe%3A%20Step-By-Step%3A%20Migrating%20The%20Active%20Directory%20Certificate%20Service%20From%20Windows%20Server%202003%20to%20201%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-648900%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F102838%22%20target%3D%22_blank%22%3E%40Anthony%20Bartolo%3C%2FA%3E%26nbsp%3B%2C%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F347225%22%20target%3D%22_blank%22%3E%40EddPr%3C%2FA%3E%26nbsp%3BI%20agree%2C%202008%20R2%20to%202019%20with%20Offline%20root%20CA%20and%20Online%20Issuing%20CA%20(subordinate)%20and%20I%20have%20a%20separate%20web%20IIS%20for%20CRL%20usage.%26nbsp%3B%20Is%20this%20available%20yet%3F%26nbsp%3B%20Almost%20a%20month%20since%20you%20mentioned%20you%20were%20working%20on%20it.%26nbsp%3B%20Hoping%20it%20is%20done%20and%20you%20can%20post%20a%20link.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-306931%22%20slang%3D%22en-US%22%3EStep-By-Step%3A%20Migrating%20The%20Active%20Directory%20Certificate%20Service%20From%20Windows%20Server%202003%20to%202012%20R2%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-306931%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3ESupport%20for%20both%20Windows%20Server%202003%20and%202003%20R2%20ended%20on%20July%2014%3CSUP%3Eth%3C%2FSUP%3E%202015%26nbsp%3Band%20yet%20there%20are%20still%20a%20number%20of%20organizations%20operating%20their%20businesses%20on%20it.%20With%20this%20in%20mind%2C%20there%20are%20still%20a%20great%20number%20of%20IT%20professionals%20in%20midst%20of%20planning%20migration.%20This%20guide%2C%20originally%20shared%20by%20Microsoft%20MVP%20Dishan%20Francis%2C%20will%20provide%20steps%20on%20migrating%20AD%20CS%20from%20Windows%20Server%202003%20to%20Windows%20Server%202012%20R2.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20style%3D%22width%3A%20480px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F64262i6A33110D84590C08%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Windows_Server_2003_Certificate_Migration_001.png%22%20title%3D%22Windows_Server_2003_Certificate_Migration_001.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ET%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3Ehis%20demonstration%20will%20use%20the%20following%20setup.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CTABLE%20border%3D%221%22%20cellspacing%3D%220%22%20cellpadding%3D%220%22%3E%0A%3CTBODY%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22312%22%20valign%3D%22top%22%3E%3CP%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3EServer%20Name%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%20valign%3D%22top%22%3E%3CP%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3EOperating%20System%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%20valign%3D%22top%22%3E%3CP%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3EServer%20Roles%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22312%22%20valign%3D%22top%22%3E%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3Ecanitpro-casrv.canitpro.local%3C%2FSPAN%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%20valign%3D%22top%22%3E%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3EWindows%20Server%202003%20R2%20Enterprise%20x86%3C%2FSPAN%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%20valign%3D%22top%22%3E%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3EAD%20CS%20(%20Enterprise%20Certificate%20Authority%20)%3C%2FSPAN%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22312%22%20valign%3D%22top%22%3E%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3ECANITPRO-DC2K12.canitpro.local%3C%2FSPAN%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%20valign%3D%22top%22%3E%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3EWindows%20Server%202012%20R2%20x64%3C%2FSPAN%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22312%22%20valign%3D%22top%22%3E%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E-%3C%2FSPAN%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CP%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3EStep%201%3A%20Backup%20Windows%20Server%202003%20certificate%20authority%20database%20and%20its%20configuration%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E1.%20Log%20in%20to%20Windows%202003%20Server%20as%20member%20of%20local%20administrator%20group%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E2.%20Go%20to%20Start%20%26gt%3B%20Administrative%20Tools%20%26gt%3B%20Certificate%20Authority%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image002_55BF4D16.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image002_thumb_0C2FFF19.jpg%22%20border%3D%220%22%20alt%3D%22clip_image002%22%20title%3D%22clip_image002%22%20width%3D%22640%22%20height%3D%22433%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E3.%20Right%20Click%20on%20Server%20Node%20%26gt%3B%20All%20Tasks%20%26gt%3B%20Backup%20CA%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image004_471731E2.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image004_thumb_2455FA25.jpg%22%20border%3D%220%22%20alt%3D%22clip_image004%22%20title%3D%22clip_image004%22%20width%3D%22640%22%20height%3D%22213%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E4.%20Then%20it%20will%20open%20the%20%E2%80%9CCertification%20Authority%20Backup%20Wizard%E2%80%9D%20and%20click%20%E2%80%9CNext%E2%80%9D%20to%20continue%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image006_2D458C64.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image006_thumb_682CBF2D.jpg%22%20border%3D%220%22%20alt%3D%22clip_image006%22%20title%3D%22clip_image006%22%20width%3D%22640%22%20height%3D%22451%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E5.%20In%20next%20window%20click%20on%20check%20boxes%20to%20select%20options%20as%20highlighted%20and%20click%20on%20%E2%80%9CBrowse%E2%80%9D%20to%20provide%20the%20backup%20file%20path%20location%20where%20it%20will%20save%20the%20backup%20file.%20Then%20click%20on%20%E2%80%9CNext%E2%80%9D%20to%20continue%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image008_4216C33D.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image008_thumb_5F8BA4FA.jpg%22%20border%3D%220%22%20alt%3D%22clip_image008%22%20title%3D%22clip_image008%22%20width%3D%22640%22%20height%3D%22451%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E6.%20Then%20it%20will%20ask%20to%20provide%20a%20password%20to%20protect%20private%20key%20and%20CA%20certificate%20file.%20Once%20provided%20the%20password%20click%20on%20next%20to%20continue%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image010_48602A7C.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image010_thumb_2E8BF44D.jpg%22%20border%3D%220%22%20alt%3D%22clip_image010%22%20title%3D%22clip_image010%22%20width%3D%22640%22%20height%3D%22451%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E7.%20In%20next%20window%20it%20will%20provide%20the%20confirmation%20and%20click%20on%20%E2%80%9CFinish%E2%80%9D%20to%20complete%20the%20process%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3EStep%202%3A%20Backup%20CA%20Registry%20Settings%20%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E1.%20Click%20Start%20%26gt%3B%20Run%20and%20then%20type%3CSTRONG%3E%20regedit%3C%2FSTRONG%3E%20and%20click%20%E2%80%9COk%E2%80%9D%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image012_454DCC87.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image012_thumb_0E737841.jpg%22%20border%3D%220%22%20alt%3D%22clip_image012%22%20title%3D%22clip_image012%22%20width%3D%22512%22%20height%3D%22246%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%20medium%3B%22%3E2.%20Then%20expand%20the%20key%20in%20following%20path%20%3CSTRONG%3EHKEY_LOCAL_MACHINE%5CSYSTEM%5CCurrentControlSet%5CServices%5CCertSvc%3C%2FSTRONG%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E3.%20Right%20click%20on%20%E2%80%9CConfiguration%E2%80%9D%20key%20and%20click%20on%20%E2%80%9CExport%E2%80%9D%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image014_1E161403.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image014_thumb_09B56FDA.jpg%22%20border%3D%220%22%20alt%3D%22clip_image014%22%20title%3D%22clip_image014%22%20width%3D%22565%22%20height%3D%22480%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E4.%20In%20next%20window%20select%20the%20path%20you%20need%20to%20save%20the%20backup%20file%20and%20provide%20a%20name%20for%20it.%20Then%20click%20on%20save%20to%20complete%20the%20backup%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image016_36CCED59.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image016_thumb_4C4CBD65.jpg%22%20border%3D%220%22%20alt%3D%22clip_image016%22%20title%3D%22clip_image016%22%20width%3D%22576%22%20height%3D%22480%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3ENow%20we%20have%20the%20backup%20of%20the%20CA%20and%20move%20these%20files%20to%20the%20new%20windows%202012%20R2%20server.%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image018_4A12C55A.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image018_thumb_251504E1.jpg%22%20border%3D%220%22%20alt%3D%22clip_image018%22%20title%3D%22clip_image018%22%20width%3D%22640%22%20height%3D%22250%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3EStep%203%3A%20Uninstall%20CA%20Service%20from%20Windows%20Server%202003%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3ENow%20we%20have%20the%20backup%20files%20ready%20and%20before%20configure%20certificate%20services%20in%20new%20Windows%20Server%202012%20r2%2C%20we%20can%20uninstall%20the%20CA%20services%20from%20windows%202003%20server.%20To%20do%20that%20need%20to%20follow%20following%20steps.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E1.%20Click%20on%20Start%20%26gt%3B%20Control%20Panel%20%26gt%3B%20Add%20or%20Remove%20Programs%20%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image020_073680E0.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image020_thumb_0253CD24.jpg%22%20border%3D%220%22%20alt%3D%22clip_image020%22%20title%3D%22clip_image020%22%20width%3D%22640%22%20height%3D%22318%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E2.%20Then%20click%20on%20%E2%80%9CAdd%2FRemove%20Windows%20Components%E2%80%9D%20button%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image022_51C04F6B.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image022_thumb_7824C367.jpg%22%20border%3D%220%22%20alt%3D%22clip_image022%22%20title%3D%22clip_image022%22%20width%3D%22640%22%20height%3D%22385%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E3.%20In%20next%20window%20%3CSTRONG%3Eremove%3C%2FSTRONG%3E%20the%20tick%20in%20%E2%80%9CCertificate%20Services%E2%80%9D%20and%20click%20on%20next%20to%20continue%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image024_0E7A68AD.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image024_thumb_1E1D046F.jpg%22%20border%3D%220%22%20alt%3D%22clip_image024%22%20title%3D%22clip_image024%22%20width%3D%22640%22%20height%3D%22475%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E4.%20Once%20its%20completed%20the%20process%20it%20will%20give%20the%20confirmation%20and%20click%20on%20%E2%80%9CFinish%E2%80%9D%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image026_3642FF7B.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image026_thumb_53B7E138.jpg%22%20border%3D%220%22%20alt%3D%22clip_image026%22%20title%3D%22clip_image026%22%20width%3D%22640%22%20height%3D%22479%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3EWith%20it%20we%20done%20with%20Windows%20Server%202003%20CA%20services%20and%20next%20step%20to%20get%20the%20Windows%20Server%202012%20CA%20services%20install%20and%20configure.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3EStep%204%3A%20Install%20Windows%20Server%202012%20R2%20Certificate%20Services%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E1.%20Log%20in%20to%20Windows%20Server%202012%20as%20Domain%20Administrator%20or%20member%20of%20local%20administrator%20group%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E2.%20Go%20to%20Server%20Manager%20%26gt%3B%20Add%20roles%20and%20features%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image028_05B21274.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image028_thumb_2E507E7B.jpg%22%20border%3D%220%22%20alt%3D%22clip_image028%22%20title%3D%22clip_image028%22%20width%3D%22640%22%20height%3D%22296%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E3.%20It%20will%20open%20up%20%E2%80%9CAdd%20roles%20and%20feature%E2%80%9D%20wizard%20and%20click%20on%20next%20to%20continue%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image030_7B807806.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image030_thumb_19618CB9.jpg%22%20border%3D%220%22%20alt%3D%22clip_image030%22%20title%3D%22clip_image030%22%20width%3D%22640%22%20height%3D%22417%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E4.%20Then%20next%20window%20select%20%E2%80%9CRole-based%20or%20Feature-based%20installation%E2%80%9D%20and%20click%20next%20to%20continue%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image032_64578E39.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image032_thumb_0EC65008.jpg%22%20border%3D%220%22%20alt%3D%22clip_image032%22%20title%3D%22clip_image032%22%20width%3D%22640%22%20height%3D%22414%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E5.%20From%20the%20server%20selections%20keep%20the%20default%20selection%20and%20click%20on%20next%20to%20continue%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image034_37D0EF04.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image034_thumb_0E5CADC4.jpg%22%20border%3D%220%22%20alt%3D%22clip_image034%22%20title%3D%22clip_image034%22%20width%3D%22640%22%20height%3D%22419%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E6.%20In%20next%20window%20click%20on%20tick%20box%20to%20select%20%E2%80%9CActive%20Directory%20Certificate%20Services%E2%80%9D%20and%20it%20will%20pop%20up%20with%20window%20to%20acknowledge%20about%20required%20features%20need%20to%20be%20added.%20Click%20on%20add%20features%20to%20add%20them%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image036_5DC9300B.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image036_thumb_2AFBBA48.jpg%22%20border%3D%220%22%20alt%3D%22clip_image036%22%20title%3D%22clip_image036%22%20width%3D%22640%22%20height%3D%22388%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image038_65E2ED11.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image038_thumb_4EB77293.jpg%22%20border%3D%220%22%20alt%3D%22clip_image038%22%20title%3D%22clip_image038%22%20width%3D%22640%22%20height%3D%22416%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E7.%20Then%20in%20features%20section%20will%20let%20it%20run%20with%20default.%20Click%20next%20to%20continue%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image040_57A704D2.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image040_thumb_04BBF1A1.jpg%22%20border%3D%220%22%20alt%3D%22clip_image040%22%20title%3D%22clip_image040%22%20width%3D%22640%22%20height%3D%22417%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E8.%20In%20next%20window%2C%20it%20will%20give%20brief%20description%20about%20AD%20CS.%20Click%20next%20to%20continue%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image042_74AFB39A.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image042_thumb_263DB1E1.jpg%22%20border%3D%220%22%20alt%3D%22clip_image042%22%20title%3D%22clip_image042%22%20width%3D%22640%22%20height%3D%22418%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E9.%20Then%20it%20will%20give%20option%20to%20select%20roles%20services.%20I%20have%20selected%20Certificate%20Authority%20and%20Certification%20Authority%20Web%20Enrollment.%20Click%20next%20to%20continue%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image044_239786E1.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image044_thumb_6E8D8861.jpg%22%20border%3D%220%22%20alt%3D%22clip_image044%22%20title%3D%22clip_image044%22%20width%3D%22640%22%20height%3D%22418%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E10.%20Since%20Certification%20Authority%20Web%20Enrollment%20selected%20it%20will%20required%20IIS.%20So%20next%20window%20it%20will%20give%20brief%20description%20about%20IIS%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image046_7710E7AB.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image046_thumb_6704A9A5.jpg%22%20border%3D%220%22%20alt%3D%22clip_image046%22%20title%3D%22clip_image046%22%20width%3D%22640%22%20height%3D%22421%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E11.%20Then%20in%20next%20window%20it%20gives%20option%20to%20add%20IIS%20role%20services.%20I%20will%20leave%20it%20default%20and%20click%20next%20to%20continue%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image048_2FBE226A.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image048_thumb_3F60BE2C.jpg%22%20border%3D%220%22%20alt%3D%22clip_image048%22%20title%3D%22clip_image048%22%20width%3D%22640%22%20height%3D%22414%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E12.%20Next%20window%20will%20give%20confirmation%20about%20service%20install%20and%20click%20on%20%E2%80%9CInstall%E2%80%9D%20to%20start%20the%20installation%20process%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image050_75D1702E.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image050_thumb_5EA5F5B0.jpg%22%20border%3D%220%22%20alt%3D%22clip_image050%22%20title%3D%22clip_image050%22%20width%3D%22640%22%20height%3D%22416%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E13.%20Once%20installation%20completes%20you%20can%20close%20the%20wizard.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CSPAN%20style%3D%22text-decoration%3A%20underline%3B%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3EStep%205%3A%20Configure%20AD%20CS%20%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3EIn%20this%20step%20will%20look%20in%20to%20configuration%20and%20restoring%20the%20backup%20we%20created.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E1.%20Log%20in%20to%20server%20as%20Enterprise%20Administrator%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E2.%20Go%20to%20Server%20Manager%20%26gt%3B%20AD%20CS%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image052_3531B470.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image052_thumb_0261ADFC.jpg%22%20border%3D%220%22%20alt%3D%22clip_image052%22%20title%3D%22clip_image052%22%20width%3D%22579%22%20height%3D%22448%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E3.%20In%20right%20hand%20panel%20it%20will%20show%20message%20as%20following%20screenshot%20and%20click%20on%20%E2%80%9CMore%E2%80%9D%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image054_7491F8B1.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image054_thumb_41C1F23D.jpg%22%20border%3D%220%22%20alt%3D%22clip_image054%22%20title%3D%22clip_image054%22%20width%3D%22640%22%20height%3D%22142%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E4.%20It%20will%20open%20up%20window%20and%20click%20on%20%E2%80%9CConfigure%20Active%20Directory%20Certificate%20Service%20%E2%80%A6%E2%80%A6%E2%80%9D%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image056_03C8617F.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image056_thumb_0EF47C7A.jpg%22%20border%3D%220%22%20alt%3D%22clip_image056%22%20title%3D%22clip_image056%22%20width%3D%22640%22%20height%3D%22327%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E5.%20It%20will%20open%20role%20configuration%20wizard%2C%20it%20gives%20option%20to%20change%20the%20credential%2C%20in%20here%20I%20already%20log%20in%20as%20Enterprise%20administrator%20so%20I%20will%20leave%20the%20default%20and%20click%20next%20to%20continue%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image058_49DBAF43.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image058_thumb_799957C2.jpg%22%20border%3D%220%22%20alt%3D%22clip_image058%22%20title%3D%22clip_image058%22%20width%3D%22640%22%20height%3D%22431%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E6.%20In%20next%20window%20it%20asking%20which%20service%20you%20like%20to%20configure.%20Select%20%E2%80%9CCertification%20Authority%E2%80%9D%2C%20%E2%80%9CCertification%20Authority%20Web%20Enrollment%E2%80%9D%20options%20and%20click%20next%20to%20continue%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image060_3B9FC704.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image060_thumb_3965CEF9.jpg%22%20border%3D%220%22%20alt%3D%22clip_image060%22%20title%3D%22clip_image060%22%20width%3D%22640%22%20height%3D%22431%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E7.%20It%20will%20be%20Enterprise%20CA%20so%20in%20next%20window%20select%20the%20Enterprise%20CA%20as%20the%20setup%20type%20and%20click%20next%20to%20continue%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image062_68B74483.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image062_thumb_11C1E380.jpg%22%20border%3D%220%22%20alt%3D%22clip_image062%22%20title%3D%22clip_image062%22%20width%3D%22640%22%20height%3D%22432%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E8.%20Next%20window%20select%20%E2%80%9CRoot%20CA%E2%80%9D%20as%20the%20CA%20type%20and%20click%20next%20to%20continue%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image064_53C852C1.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image064_thumb_60C232D2.jpg%22%20border%3D%220%22%20alt%3D%22clip_image064%22%20title%3D%22clip_image064%22%20width%3D%22640%22%20height%3D%22431%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E9.%20The%20next%20option%20is%20very%20important%20on%20the%20configuration.%20If%20its%20new%20installation%20we%20will%20only%20need%20to%20create%20new%20private%20key.%20But%20since%20it%E2%80%99s%20a%20migration%20process%20we%20already%20made%20a%20backup%20of%20private%20key.%20So%20in%20here%20select%20the%20options%20as%20highlighted%20in%20screenshot.%20Then%20click%20on%20next%20to%20continue%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image066_37BA2487.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image066_thumb_326B3DD6.jpg%22%20border%3D%220%22%20alt%3D%22clip_image066%22%20title%3D%22clip_image066%22%20width%3D%22640%22%20height%3D%22429%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E10.%20In%20next%20window%20click%20on%20%E2%80%9CImport%E2%80%9D%20button%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image068_17357586.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image068_thumb_7D613F56.jpg%22%20border%3D%220%22%20alt%3D%22clip_image068%22%20title%3D%22clip_image068%22%20width%3D%22640%22%20height%3D%22431%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E11.%20In%20here%20it%20will%20give%20option%20to%20select%20the%20key%20we%20backup%20during%20the%20backup%20process%20from%20windows%202003%20server.%20Brows%20and%20select%20the%20key%20from%20the%20backup%20we%20made%20and%20provide%20the%20password%20we%20used%20for%20protection.%20Then%20click%20ok%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image070_266BDE53.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image070_thumb_1D12A9D0.jpg%22%20border%3D%220%22%20alt%3D%22clip_image070%22%20title%3D%22clip_image070%22%20width%3D%22515%22%20height%3D%22405%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E12.%20Then%20it%20will%20import%20the%20key%20successfully%20and%20in%20window%20select%20the%20imported%20certificate%20and%20click%20next%20to%20continue%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image072_7F3425CE.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image072_thumb_2EF1CE4E.jpg%22%20border%3D%220%22%20alt%3D%22clip_image072%22%20title%3D%22clip_image072%22%20width%3D%22640%22%20height%3D%22428%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E13.%20Next%20window%20we%20can%20define%20certificate%20database%20path.%20In%20here%20I%20will%20leave%20it%20default%20and%20click%20next%20to%20continue%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image074_09F40DD5.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image074_thumb_57240760.jpg%22%20border%3D%220%22%20alt%3D%22clip_image074%22%20title%3D%22clip_image074%22%20width%3D%22640%22%20height%3D%22428%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E14.%20Then%20in%20next%20window%20it%20will%20provide%20the%20configuration%20confirmation%20and%20click%20on%20configure%20to%20proceed%20with%20the%20process%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image076_790F69E4.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image076_thumb_370B8B54.jpg%22%20border%3D%220%22%20alt%3D%22clip_image076%22%20title%3D%22clip_image076%22%20width%3D%22640%22%20height%3D%22431%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E15.%20Once%20its%20completed%20click%20on%20close%20to%20exit%20from%20the%20configuration%20wizard%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3EStep%206%3A%20Restore%20CA%20Backup%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3ENow%20it%E2%80%99s%20comes%20to%20the%20most%20important%20part%20of%20the%20process%20which%20is%20to%20restore%20the%20CA%20backup%20we%20made%20from%20Windows%20Server%202003.%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E1.%20Go%20To%20Server%20Manager%20%26gt%3B%20Tools%20%26gt%3B%20Certification%20Authority%20%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image078_64207822.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image078_thumb_54143A1C.jpg%22%20border%3D%220%22%20alt%3D%22clip_image078%22%20title%3D%22clip_image078%22%20width%3D%22583%22%20height%3D%22480%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E2.%20Then%20right%20click%20on%20server%20node%20%26gt%3B%20All%20Tasks%20%26gt%3B%20Restore%20CA%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image080_3C7C8CA9.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image080_thumb_735971A0.jpg%22%20border%3D%220%22%20alt%3D%22clip_image080%22%20title%3D%22clip_image080%22%20width%3D%22640%22%20height%3D%22295%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E3.%20Then%20it%20will%20ask%20if%20it%E2%80%99s%20okay%20to%20stop%20the%20certificate%20service%20in%20order%20to%20proceed.%20Click%20ok%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image082_5C2DF722.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image082_thumb_10622069.jpg%22%20border%3D%220%22%20alt%3D%22clip_image082%22%20title%3D%22clip_image082%22%20width%3D%22640%22%20height%3D%22203%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E4.%20It%20will%20open%20up%20Certification%20Authority%20Restore%20Wizard%2C%20click%20next%20to%20continue%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image084_2070EF20.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image084_thumb_0D4FC274.jpg%22%20border%3D%220%22%20alt%3D%22clip_image084%22%20title%3D%22clip_image084%22%20width%3D%22640%22%20height%3D%22467%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E5.%20In%20next%20window%20brows%20the%20folder%20where%20we%20stored%20backup%20and%20select%20it.%20Then%20also%20select%20the%20options%20as%20I%20did%20in%20below.%20Later%20click%20next%20to%20continue%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image086_5D2877B0.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image086_thumb_382AB737.jpg%22%20border%3D%220%22%20alt%3D%22clip_image086%22%20title%3D%22clip_image086%22%20width%3D%22640%22%20height%3D%22465%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E6.%20Next%20window%20give%20option%20to%20enter%20the%20password%20we%20used%20to%20protect%20private%20key%20during%20the%20backup%20process.%20Once%20its%20enter%20click%20next%20to%20continue%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image088_2ED182B4.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image088_thumb_30A1D87B.jpg%22%20border%3D%220%22%20alt%3D%22clip_image088%22%20title%3D%22clip_image088%22%20width%3D%22640%22%20height%3D%22469%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E7.%20In%20next%20window%20click%20%E2%80%9CFinish%E2%80%9D%20to%20complete%20the%20import%20process%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image090_605F80FA.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image090_thumb_3E0A7C32.jpg%22%20border%3D%220%22%20alt%3D%22clip_image090%22%20title%3D%22clip_image090%22%20width%3D%22640%22%20height%3D%22469%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E8.%20Once%20its%20completed%20system%20will%20ask%20if%20it%E2%80%99s%20okay%20to%20start%20the%20certificate%20service%20again.%20Please%20proceed%20with%20it%20to%20bring%20service%20back%20online%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3EStep%207%3A%20Restore%20Registry%20info%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3EDuring%20the%20CA%20backup%20process%20we%20also%20backup%20registry%20key.%20It%E2%80%99s%20time%20to%20restore%20it.%20To%20do%20it%20open%20the%20folder%20which%20contains%20the%20backup%20reg%20key.%20Then%20double%20click%20on%20the%20key.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E1.%20Then%20click%20yes%20to%20proceed%20with%20registry%20key%20restore%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image092_0D76FE7A.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image092_thumb_21901B03.jpg%22%20border%3D%220%22%20alt%3D%22clip_image092%22%20title%3D%22clip_image092%22%20width%3D%22640%22%20height%3D%22416%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E2.%20Once%20completed%20it%20will%20give%20confirmation%20about%20the%20restore%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image094_05EE1FBE.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image094_thumb_5A3D55C1.jpg%22%20border%3D%220%22%20alt%3D%22clip_image094%22%20title%3D%22clip_image094%22%20width%3D%22640%22%20height%3D%22145%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3EStep%208%3A%20Reissue%20Certificate%20Templates%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3EWe%20have%20done%20with%20the%20migration%20process%20and%20now%20it%E2%80%99s%20time%20to%20reissue%20the%20certificates.%20I%20had%20template%20setup%20in%20windows%202003%20environment%20called%20%E2%80%9CPC%20Certificate%E2%80%9D%20which%20will%20issue%20the%20certificates%20to%20the%20domain%20computers.%20Let%E2%80%99s%20see%20how%20I%20can%20reissue%20them.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E1.%20Open%20the%20Certification%20Authority%20Snap-in%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E2.%20Right%20click%20on%20Certificate%20Templates%20Folder%20%26gt%3B%20New%20%26gt%3B%20Certificate%20Template%20to%20Reissue%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image096_31354776.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image096_thumb_733BB6B7.jpg%22%20border%3D%220%22%20alt%3D%22clip_image096%22%20title%3D%22clip_image096%22%20width%3D%22640%22%20height%3D%22304%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E3.%20From%20the%20certificate%20templates%20list%20click%20on%20the%20appropriate%20certificate%20template%20and%20click%20ok%3CBR%20%2F%3E%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image098_54F0FFC1.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20margin%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image098_thumb_6FBD25CD.jpg%22%20border%3D%220%22%20alt%3D%22clip_image098%22%20title%3D%22clip_image098%22%20width%3D%22640%22%20height%3D%22374%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3EStep%209%3A%20Test%20the%20CA%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3EIn%20here%20I%20already%20had%20certificate%20template%20setup%20for%20the%20PC%20and%20set%20it%20to%20auto%20enroll.%20For%20the%20testing%20purposes%20I%20have%20setup%20windows%208%20pc%20called%20%3CSTRONG%3Edemo1%20%3C%2FSTRONG%3Eand%20added%20it%20to%20canitpro.local%20domain.%20Once%20it%E2%80%99s%20loaded%20first%20time%20in%20server%20I%20open%20certification%20authority%20snap%20in%20and%20once%20I%20expanded%20the%20%E2%80%9CIssued%20Certificate%E2%80%9D%20section%20I%20can%20clearly%20see%20the%20new%20certificate%20it%20issued%20for%20the%20PC.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image100_08BB86C4.jpg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3E%3CIMG%20style%3D%22background-image%3A%20none%3B%20padding-top%3A%200px%3B%20padding-left%3A%200px%3B%20display%3A%20inline%3B%20padding-right%3A%200px%3B%20border%3A%200px%3B%22%20src%3D%22https%3A%2F%2Fmsdnshared.blob.core.windows.net%2Fmedia%2FTNBlogsFS%2Fprod.evol.blogs.technet.com%2FCommunityServer.Blogs.Components.WeblogFiles%2F00%2F00%2F00%2F48%2F12%2Fmetablogapi%2Fclip_image100_thumb_1CD4A34D.jpg%22%20border%3D%220%22%20alt%3D%22clip_image100%22%20title%3D%22clip_image100%22%20width%3D%22640%22%20height%3D%22381%22%20%2F%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20Arial%3B%20font-size%3A%20medium%3B%22%3ESo%20this%20confirms%20the%20migration%20is%20successful.%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-306931%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3ESupport%20for%20both%20Windows%20Server%202003%20and%202003%20R2%20ended%20on%20July%2014%3C%2FSPAN%3E%3CSUP%3Eth%3C%2FSUP%3E%3CSPAN%3E%202015%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Eand%20yet%3C%2FSPAN%3E%3CSPAN%3E%20there%20are%20still%20a%20number%20of%20organizations%20operating%20their%20businesses%20on%20it.%20With%20this%20in%20mind%2C%20there%20are%20still%20a%20great%20number%20of%20IT%20professionals%20in%20midst%20of%20planning%20migration.%20This%20guide%2C%20originally%20shared%20by%20Microsoft%20MVP%20Dishan%20Francis%2C%20will%20provide%20steps%20on%20migrating%20AD%20CS%20from%20Windows%20Server%202003%20to%20Windows%20Server%202012%20R2.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20style%3D%22width%3A%20480px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F64261iBEE978CDCB677F5E%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Windows_Server_2003_Certificate_Migration_001.png%22%20title%3D%22Windows_Server_2003_Certificate_Migration_001.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-306931%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAnthony%20Bartolo%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Server%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-700734%22%20slang%3D%22en-US%22%3ERe%3A%20Step-By-Step%3A%20Migrating%20The%20Active%20Directory%20Certificate%20Service%20From%20Windows%20Server%202003%20to%20201%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-700734%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F90070%22%20target%3D%22_blank%22%3E%40Chase%20Roth%3C%2FA%3E%26nbsp%3Bthe%20requested%20blog%20post%20detailing%20migration%20from%202008%20R2%20to%202016%20%2F%202019%20has%20been%20created%20and%20published.%20It%20can%20be%20found%20here%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FITOps-Talk-Blog%2FStep-By-Step-Migrating-The-Active-Directory-Certificate-Service%2Fbc-p%2F700730%23M270%253FWT.mc_id%3DITOPSTALK-blog-abartolo%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FITOps-Talk-Blog%2FStep-By-Step-Migrating-The-Active-Directory-Certificate-Service%2Fbc-p%2F700730%23M270%253FWT.mc_id%3DITOPSTALK-blog-abartolo%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-701359%22%20slang%3D%22en-US%22%3ERe%3A%20Step-By-Step%3A%20Migrating%20The%20Active%20Directory%20Certificate%20Service%20From%20Windows%20Server%202003%20to%20201%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-701359%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F102838%22%20target%3D%22_blank%22%3E%40Anthony%20Bartolo%3C%2FA%3Ethanks%2C%20but%20the%20requested%20was%20Offline%20Standard%20Root%20CA%20and%20Online%20Enterprise%20Issuing%20(subordinate)%20CA.%26nbsp%3B%20I%20was%20able%20to%20complete%20my%20task%20using%20your%20other%20post(s)%20and%20piecemealed%20with%20a%20few%20other%20blogs%20to%20work%20out%20enough%20of%20the%20process.%26nbsp%3B%20The%20new%20article%20I%20am%20sure%20will%20help%20a%20bunch%20of%20others%20though%20that%20have%20purely%20Online%20Enterprise%20Root%20CA%20environments.%26nbsp%3B%20Others%20with%20the%20recommended%20Offline%20Root%20CA%20and%20Online%20Subordinate%20CA%20are%20likely%20still%20hoping%20for%20a%20full%20run-down%20of%20the%20process.%26nbsp%3B%20Steps%20were%20pretty%20much%20the%20same%2C%20but%20having%20to%20throw%20in%20transferring%20of%20signing%20requests%20between%20offline%2Fonline%20CAs%2C%20updating%20the%20CRLs%20from%20Offline%20Root%20to%20Online%20LDAP%20and%20HTTP%20CDP%20locations%2C%20and%20in%20my%20case%20I%20resigned%20a%20new%20request%20for%20the%20Online%20to%20have%20all%20the%20new%20server%20names%20in%20the%20certificates%20and%20AIA%2FCDP%20file%20names%2Fpaths.%26nbsp%3B%20I%20can't%20detail%20it%20all%20out%2C%20but%20I%20am%20sure%20others%20would%20appreciate%20it%20if%20you%20were%20able%20to!%26nbsp%3B%20Oh%20and%20I%20did%20not%20need%20to%20reissue%20certificate%20templates.%26nbsp%3B%20They%20were%20still%20there%20and%20active%20when%20all%20was%20said%20and%20done...%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F347225%22%20target%3D%22_blank%22%3E%40EddPr%3C%2FA%3EI%20reissued%20my%20Root%20CA%20with%20the%20same%20key%20(not%20a%20new%20one)%2C%20which%20I%20think%20keeps%20the%20peace%20with%20the%20old%20certificates.%26nbsp%3B%20I%20then%20used%20that%20to%20reissue%20my%20enterprise%20online%20CA%20cert%2C%20and%20then%20was%20sure%20to%20load%20all%20of%20those%20updated%20files%20to%20the%20AIA%20and%20CDP%20locations%20for%20LDAP%2FHTTP.%26nbsp%3B%20I%20did%20not%20remove%20any%20of%20the%20files%20from%20my%20HTTP%20location%20so%20older%20CRT%20files%20are%20still%20there%20for%20old%20server%20names%2C%20etc.%26nbsp%3B%20Has%20been%20done%20for%20a%20few%20weeks%20and%20no%20issues%20thus%20far.%20%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-701384%22%20slang%3D%22en-US%22%3ERe%3A%20Step-By-Step%3A%20Migrating%20The%20Active%20Directory%20Certificate%20Service%20From%20Windows%20Server%202003%20to%20201%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-701384%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F102838%22%20target%3D%22_blank%22%3E%40Anthony%20Bartolo%3C%2FA%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F90070%22%20target%3D%22_blank%22%3E%40Chase%20Roth%3C%2FA%3E%26nbsp%3BI'm%20with%20Chase%20in%20that%20I%20need%20a%20guide%20for%20an%20offline%20root%20and%20online%20subordinate.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-701677%22%20slang%3D%22en-US%22%3ERe%3A%20Step-By-Step%3A%20Migrating%20The%20Active%20Directory%20Certificate%20Service%20From%20Windows%20Server%202003%20to%20201%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-701677%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F113142%22%20target%3D%22_blank%22%3E%40Jon%20Bonner%3C%2FA%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F90070%22%20target%3D%22_blank%22%3E%40Chase%20Roth%3C%2FA%3E%26nbsp%3BIts%20going%20to%20take%20me%20some%20time%20to%20put%20it%20together.%26nbsp%3B%20Stay%20tuned.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-748530%22%20slang%3D%22en-US%22%3ERe%3A%20Step-By-Step%3A%20Migrating%20The%20Active%20Directory%20Certificate%20Service%20From%20Windows%20Server%202003%20to%20201%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-748530%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F102838%22%20target%3D%22_blank%22%3E%40Anthony%20Bartolo%3C%2FA%3E%26nbsp%3BThank%20you%20for%20putting%20these%20guides%20together%20for%20everyone!!%20I%20have%20a%20question%20regarding%20upgrading%20our%202003%20CA.%20We're%20an%20enterprise%20organization%20with%20a%20LOT%20of%20servers%20and%20workstations.%20We%20have%20an%20on-prem%20Exchange%20deployment%20as%20well%20as%20many%20other%20MS%20services%20that%20use%20the%20CA.%20Will%20migrating%20to%20a%20new%20server%20cause%20any%20issues%20for%20the%20currently%20leased%20certificates%3F%20Will%20we%20have%20to%20reissue%20every%20certificate%20the%20CA%20has%20authority%20over%20or%20will%20the%20migration%20be%20seamless%2C%20even%20though%20the%20new%20server%20will%20have%20a%20new%20hostname%20and%20all%20that%3F%20What%20about%20Exchange%20and%20Skype%20for%20Business%20servers%3F%20Will%20they%20know%20to%20use%20the%20new%20CA%20server%20automatically%20or%20is%20there%20manual%20intervention%20after%20the%20CA%20migration%3F%3CBR%20%2F%3E%3CBR%20%2F%3EWhat%20I'm%20trying%20to%20find%20out%20is%20how%20much%20work%20will%20be%20required%20after%20the%20CA%20has%20been%20migrated.%20What%20will%20I%20need%20to%20be%20careful%20with%20and%20what%20will%20I%20need%20to%20do%20to%20ensure%20all%20of%20our%20current%20services%20do%20not%20go%20offline%20with%20SSL%20problems%3F%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EThanks%20again!!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-818128%22%20slang%3D%22en-US%22%3ERe%3A%20Step-By-Step%3A%20Migrating%20The%20Active%20Directory%20Certificate%20Service%20From%20Windows%20Server%202003%20to%20201%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-818128%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20for%20the%20great%20article!%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ELike%2C%20others%2C%20I%20am%20also%20in%20reading%20about%20an%20offline%20root%2Fonline%20sub.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Microsoft

Support for both Windows Server 2003 and 2003 R2 ended on July 14th 2015 and yet there are still a number of organizations operating their businesses on it. With this in mind, there are still a great number of IT professionals in midst of planning migration. This guide, originally shared by Microsoft MVP Dishan Francis, will provide steps on migrating AD CS from Windows Server 2003 to Windows Server 2012 R2.

 Windows_Server_2003_Certificate_Migration_001.png

 

 

 

 

This demonstration will use the following setup.

Server Name

Operating System

Server Roles

canitpro-casrv.canitpro.local

Windows Server 2003 R2 Enterprise x86

AD CS ( Enterprise Certificate Authority )

CANITPRO-DC2K12.canitpro.local

Windows Server 2012 R2 x64

-

Step 1: Backup Windows Server 2003 certificate authority database and its configuration

1. Log in to Windows 2003 Server as member of local administrator group

2. Go to Start > Administrative Tools > Certificate Authority

clip_image002

3. Right Click on Server Node > All Tasks > Backup CA

clip_image004

4. Then it will open the “Certification Authority Backup Wizard” and click “Next” to continue

clip_image006

5. In next window click on check boxes to select options as highlighted and click on “Browse” to provide the backup file path location where it will save the backup file. Then click on “Next” to continue

clip_image008

6. Then it will ask to provide a password to protect private key and CA certificate file. Once provided the password click on next to continue

clip_image010

7. In next window it will provide the confirmation and click on “Finish” to complete the process

Step 2: Backup CA Registry Settings

1. Click Start > Run and then type regedit and click “Ok”

clip_image012

2. Then expand the key in following path HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CertSvc

3. Right click on “Configuration” key and click on “Export”

clip_image014

4. In next window select the path you need to save the backup file and provide a name for it. Then click on save to complete the backup

clip_image016

Now we have the backup of the CA and move these files to the new windows 2012 R2 server.

clip_image018

Step 3: Uninstall CA Service from Windows Server 2003

Now we have the backup files ready and before configure certificate services in new Windows Server 2012 r2, we can uninstall the CA services from windows 2003 server. To do that need to follow following steps.

1. Click on Start > Control Panel > Add or Remove Programs
clip_image020

2. Then click on “Add/Remove Windows Components” button
clip_image022

3. In next window remove the tick in “Certificate Services” and click on next to continue
clip_image024

4. Once its completed the process it will give the confirmation and click on “Finish”
clip_image026

With it we done with Windows Server 2003 CA services and next step to get the Windows Server 2012 CA services install and configure.

Step 4: Install Windows Server 2012 R2 Certificate Services

1. Log in to Windows Server 2012 as Domain Administrator or member of local administrator group

2. Go to Server Manager > Add roles and features
clip_image028

3. It will open up “Add roles and feature” wizard and click on next to continue
clip_image030

4. Then next window select “Role-based or Feature-based installation” and click next to continue
clip_image032

5. From the server selections keep the default selection and click on next to continue
clip_image034

6. In next window click on tick box to select “Active Directory Certificate Services” and it will pop up with window to acknowledge about required features need to be added. Click on add features to add them
clip_image036clip_image038

7. Then in features section will let it run with default. Click next to continue
clip_image040

8. In next window, it will give brief description about AD CS. Click next to continue
clip_image042

9. Then it will give option to select roles services. I have selected Certificate Authority and Certification Authority Web Enrollment. Click next to continue
clip_image044

10. Since Certification Authority Web Enrollment selected it will required IIS. So next window it will give brief description about IIS
clip_image046

11. Then in next window it gives option to add IIS role services. I will leave it default and click next to continue
clip_image048

12. Next window will give confirmation about service install and click on “Install” to start the installation process
clip_image050

13. Once installation completes you can close the wizard.

Step 5: Configure AD CS

In this step will look in to configuration and restoring the backup we created.

1. Log in to server as Enterprise Administrator

2. Go to Server Manager > AD CS
clip_image052

3. In right hand panel it will show message as following screenshot and click on “More”
clip_image054

4. It will open up window and click on “Configure Active Directory Certificate Service ……”
clip_image056

5. It will open role configuration wizard, it gives option to change the credential, in here I already log in as Enterprise administrator so I will leave the default and click next to continue
clip_image058

6. In next window it asking which service you like to configure. Select “Certification Authority”, “Certification Authority Web Enrollment” options and click next to continue
clip_image060

7. It will be Enterprise CA so in next window select the Enterprise CA as the setup type and click next to continue
clip_image062

8. Next window select “Root CA” as the CA type and click next to continue
clip_image064

9. The next option is very important on the configuration. If its new installation we will only need to create new private key. But since it’s a migration process we already made a backup of private key. So in here select the options as highlighted in screenshot. Then click on next to continue
clip_image066

10. In next window click on “Import” button
clip_image068

11. In here it will give option to select the key we backup during the backup process from windows 2003 server. Brows and select the key from the backup we made and provide the password we used for protection. Then click ok
clip_image070

12. Then it will import the key successfully and in window select the imported certificate and click next to continue
clip_image072

13. Next window we can define certificate database path. In here I will leave it default and click next to continue
clip_image074

14. Then in next window it will provide the configuration confirmation and click on configure to proceed with the process
clip_image076

15. Once its completed click on close to exit from the configuration wizard

Step 6: Restore CA Backup

Now it’s comes to the most important part of the process which is to restore the CA backup we made from Windows Server 2003.

1. Go To Server Manager > Tools > Certification Authority
clip_image078

2. Then right click on server node > All Tasks > Restore CA
clip_image080

3. Then it will ask if it’s okay to stop the certificate service in order to proceed. Click ok
clip_image082

4. It will open up Certification Authority Restore Wizard, click next to continue
clip_image084

5. In next window brows the folder where we stored backup and select it. Then also select the options as I did in below. Later click next to continue
clip_image086

6. Next window give option to enter the password we used to protect private key during the backup process. Once its enter click next to continue
clip_image088

7. In next window click “Finish” to complete the import process
clip_image090

8. Once its completed system will ask if it’s okay to start the certificate service again. Please proceed with it to bring service back online

Step 7: Restore Registry info

During the CA backup process we also backup registry key. It’s time to restore it. To do it open the folder which contains the backup reg key. Then double click on the key.

1. Then click yes to proceed with registry key restore
clip_image092

2. Once completed it will give confirmation about the restore
clip_image094

Step 8: Reissue Certificate Templates

We have done with the migration process and now it’s time to reissue the certificates. I had template setup in windows 2003 environment called “PC Certificate” which will issue the certificates to the domain computers. Let’s see how I can reissue them.

1. Open the Certification Authority Snap-in

2. Right click on Certificate Templates Folder > New > Certificate Template to Reissue
clip_image096

3. From the certificate templates list click on the appropriate certificate template and click ok
clip_image098

Step 9: Test the CA

In here I already had certificate template setup for the PC and set it to auto enroll. For the testing purposes I have setup windows 8 pc called demo1 and added it to canitpro.local domain. Once it’s loaded first time in server I open certification authority snap in and once I expanded the “Issued Certificate” section I can clearly see the new certificate it issued for the PC.

clip_image100

So this confirms the migration is successful.

 

15 Comments
Super Contributor

There is probably more use of a guide migrating from 2008 (or R2) to newer versions like 2016/2019 as 2008 should be widely in use as it is still in support for a year.

Microsoft

@Oleg K agreed however you'd be surprised the amount of organizations (financial, government, transportation, education, etc) that are still based on Windows Server 2003 looking to modernize. This post is a repost from our former site, CANITPRO.NET, and is still of great interest to those organizations who can only modernize at a snail's pace due to regulations or other factors.

 

Happy to write about any challenges you are currently facing in future. Just let the team know what topics you'd like to see covered.

Super Contributor

I'm not surprised. On my previous job we only got rid of a last 2003 VM a year ago. It wasn't very critical though. But when i was leaving there were ~15 2008/R2 VM servers with some critical services running (although inside a LAN). I think many of them will stay on 2008 for at least a few years because of lack of IT staff, knowledge, compatibility issues and lack of budget for new licenses and hosting. And i can't imagine how they are going to move '6 servers heavily modificated SharePoint 2010 farm' anywhere. It's not that these problems are new in IT field. We have dealt with migrations from older systems in the past, but as IT becomes more complicated every day sometimes it just feels unbearable. Well, there should be a clear strategy and good planning to overcome such things. But that's another topic :)

New Contributor

Does it matter if the new server has a different name than the old one?

Microsoft

Hi @Jon Bonner.  Different server names can be used.  This is also highlighted in this lab prior to Step 1.

Regular Visitor

Hi @Anthony Bartolo will this guide work also by migrating 2008 R2 to 2019? Thanks... Smiley Happy

Microsoft

Hi @Andrej_Vizvary. Our team is working on steps to migrate from 2008 R2 to 2019.  No ETA on its completion yet but I will share its publish date when it becomes available.

Occasional Visitor

Hi @Anthony Bartolo 

 

I am looking to migrate from 2008 R2 to 2019 in the next few weeks - do you have an ETA on the steps needed?

 

Also, do you have any information on additional steps (if any) you have to do should you have an offline root CA along with the enterprise subordinate one(s)?

 

Finally, I am trying to get it clear in my head how I ensure the old issues certificate remain valid when the CRL expires or is the answer you need to reissue them all prior to the CRL expiring?

 

Thanks for your help

Edd

New Contributor

@Anthony Bartolo , @EddPr I agree, 2008 R2 to 2019 with Offline root CA and Online Issuing CA (subordinate) and I have a separate web IIS for CRL usage.  Is this available yet?  Almost a month since you mentioned you were working on it.  Hoping it is done and you can post a link.  

Microsoft

@Chase Roth the requested blog post detailing migration from 2008 R2 to 2016 / 2019 has been created and published. It can be found here: https://techcommunity.microsoft.com/t5/ITOps-Talk-Blog/Step-By-Step-Migrating-The-Active-Directory-C...

New Contributor

@Anthony Bartolothanks, but the requested was Offline Standard Root CA and Online Enterprise Issuing (subordinate) CA.  I was able to complete my task using your other post(s) and piecemealed with a few other blogs to work out enough of the process.  The new article I am sure will help a bunch of others though that have purely Online Enterprise Root CA environments.  Others with the recommended Offline Root CA and Online Subordinate CA are likely still hoping for a full run-down of the process.  Steps were pretty much the same, but having to throw in transferring of signing requests between offline/online CAs, updating the CRLs from Offline Root to Online LDAP and HTTP CDP locations, and in my case I resigned a new request for the Online to have all the new server names in the certificates and AIA/CDP file names/paths.  I can't detail it all out, but I am sure others would appreciate it if you were able to!  Oh and I did not need to reissue certificate templates.  They were still there and active when all was said and done...

 

@EddPrI reissued my Root CA with the same key (not a new one), which I think keeps the peace with the old certificates.  I then used that to reissue my enterprise online CA cert, and then was sure to load all of those updated files to the AIA and CDP locations for LDAP/HTTP.  I did not remove any of the files from my HTTP location so older CRT files are still there for old server names, etc.  Has been done for a few weeks and no issues thus far.  

New Contributor

@Anthony Bartolo @Chase Roth I'm with Chase in that I need a guide for an offline root and online subordinate.

Microsoft

@Jon Bonner @Chase Roth Its going to take me some time to put it together.  Stay tuned.

Regular Visitor

@Anthony Bartolo Thank you for putting these guides together for everyone!! I have a question regarding upgrading our 2003 CA. We're an enterprise organization with a LOT of servers and workstations. We have an on-prem Exchange deployment as well as many other MS services that use the CA. Will migrating to a new server cause any issues for the currently leased certificates? Will we have to reissue every certificate the CA has authority over or will the migration be seamless, even though the new server will have a new hostname and all that? What about Exchange and Skype for Business servers? Will they know to use the new CA server automatically or is there manual intervention after the CA migration?

What I'm trying to find out is how much work will be required after the CA has been migrated. What will I need to be careful with and what will I need to do to ensure all of our current services do not go offline with SSL problems?


Thanks again!!

Frequent Visitor

Thank you for the great article! 

 

Like, others, I am also in reading about an offline root/online sub.