Moving Certificate Authority 1

[Neily]

We recently replaced our DCs for two Virtual Machines (running on ESX server).

A backup was made of the CA on one of the DCs, but we created a new server with a different name and missed the section of the document we were reading that said that the new machine needs to have the same name.

Our certificates are due to run out in a couple of weeks, and I have the task of getting the new CA working.

How can I replace any CA that our AD believes to know about and build a new one? The ones we have don't want to issue certificates!

Thanks Kindly in Advance for any answers you are able to offer.

Neil

 

[Tobiaso]

Hey Neil,
I am in a similar situation. Did you ever find a solution for this?

Thanks,
Tobias

 

[Neily]

I managed to rebuild a brand new one and once servers were restarted they seemed to know about it.

I have since gone through and replaced all certificates and rolled out our root CA certificate.

All seems to be working fine.

Neil