Just joined a new company. Apparently back last year they got rid of the old CA and restored the certificate on a new server. (2003 to 2012). I was about to renew the certificate (self signed) on the CA but realized that:
- the Cert still is with the old name
- the new CA server is also a DC!
I am now torn between:
- backuping all CA related stuff (DB, Keys, Regs), getting a new server that has the old name and restoring the CA stuff to that server. (almost like here: http://technet.microsoft.com/en-us/library/ee126140%28WS.10%29.aspx#BKMK_RestoreCA)
- creating a new server as another (and new) CA and re issue all certs. Aka starting from scratch.
I am leaning towards 1 because it seems let work right now. I am not super expert with CAs.
Do you see any objection for doing 1?