Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Register Log in
  • Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Search results for query: *

  1. sailingfury

    CA decommission will not delete

    We have decommissioned a certificate authority and the Ent. Admin role does not have permission to delete the server from Enrollment Servers container in AD Sites and Services. All other instances of this CA were removed properly from the other containers. Any ideas what could be keeping this...
  2. sailingfury

    Bulding New CA

    Microsoft views more than one ROOTCA in a forest as "unsupportable". You can have multiple issuing CA's but only one root. We had a DC running certificate services in our test lab. Everything went great until we started using CEP to get device certificates. DC's by nature do not like to have...
  3. sailingfury

    Bulding New CA

    1. Build the new CA and do not run the restore wiz. You will have to issue new certificates on the domain. 2. The symptoms make me think that it is not a domain member. The templates need to be published to AD if you are using an enterprise CA, but you must also purge the old templates from AD...
  4. sailingfury

    How to Decommission a CA

    Microsoft has a very good document on how to decom a CA and remove all information. Article ID is 889250. http://support.microsoft.com/889250 There is also some good information on the win2003 server support site for the certutil tool. You can use it to remove the CA objects from AD.
  5. sailingfury

    Certificate Authority Disaster Recovery Planning

    When you are installing certificate services you do not want to overwrite the information in AD. Once you have CA serv installed run the restore wiz and bring the private key and the DB and overwrite them on the CA. As long as you have given the CA the same netbios name and using the correct...
  6. sailingfury

    Certificate Authority Disaster Recovery Planning

    I am not sure what it is you are asking about here. Are you wanting to recover the CA or create a new instance? If you are recovering the CA you would use the Restore CA wiz and load the CAbackup that you performed prior to the disaster plan. The CA publishes to AD, not pulls info from. Are you...

Part and Inventory Search

Back
Top