We replaced our DCs a while back, of which one of them was our CA as well.
We've still got the machine but obviously can't put it back on the domain.
We also no longer want the CA named what it is (i.e. the computer name!).
We attempted a backup and restore of the CA, but this wasn't done to a machine of the same name so we have ended up without a CA. We are now attempting to build a new CA to replace the old one, but when trying to get a IIS Web Certificate, we can't select the "send the request immediately to an online certification authority" and when doing the "prepare the request now, but send it later" option we can't get a .cer file to import into IIS to complete the certificate application.
So I'm looking for some advice about how to replace a CA but we have sites that require their certificates so we can't afford to mess this up and have downtime.
BTW - the CA we attempted to restore to has problems with templates but can see all issued and revoked (etc) certificates.
PLEASE HELP!!
We've still got the machine but obviously can't put it back on the domain.
We also no longer want the CA named what it is (i.e. the computer name!).
We attempted a backup and restore of the CA, but this wasn't done to a machine of the same name so we have ended up without a CA. We are now attempting to build a new CA to replace the old one, but when trying to get a IIS Web Certificate, we can't select the "send the request immediately to an online certification authority" and when doing the "prepare the request now, but send it later" option we can't get a .cer file to import into IIS to complete the certificate application.
So I'm looking for some advice about how to replace a CA but we have sites that require their certificates so we can't afford to mess this up and have downtime.
BTW - the CA we attempted to restore to has problems with templates but can see all issued and revoked (etc) certificates.
PLEASE HELP!!