1
vote
1answer
25 views

Migrating certificate services to Server 2008 R1

I am currently planning a move of an Active Directory Certificate Services CA from a soon to be decommissioned Server 2003 R2 Standard box to an existing Windows 2008 R1 Enterprise box. This is not ...
0
votes
2answers
59 views

What is the impact of upgrading Windows 2008 R2 Standard to Enterprise?

I have a Windows Server 2003 domain controller, a Windows Server 2008 R2 Standard domain controller, and a Windows Server 2012 domain controller. I am looking to upgrade the 2008 R2 Standard DC to ...
1
vote
0answers
31 views

EFS file access problems

in my organization, i have a deadline to deploy EFS using AD CS, and i am working with a single windows server 2003 box, which is the Root CA, and is the same server responsible to certificate ...
1
vote
2answers
178 views

Is it possible to batch sign CSRs (with certutil for instance)?

I have about 100 CSR to sign on a windows PKI. I would like to know if it's possible to batch submit, issue and export these CSRs via batch or powershell script, maybe using cert util, and how to do ...
1
vote
1answer
299 views

Decommissioning PKI - How do I set a CRL Next update to null?

I am planning on deploying two Windows 2008R2 PKIs: One for legacy devices that don't support SHA-2 / ECP and another one that does support it. When the time comes to decommission the SHA1 ...
11
votes
2answers
14k views

Distribution of root certificate with Windows AD Certificate Services

Windows Server provides a certificate authority service. However, it's not clear from its documentation how (or if) the root certificate gets distributed to clients. Do domain member computers ...
1
vote
1answer
374 views

I can't install Enterprise root CA in windows 2003

I am trying to install Enterprise CA in my windows server 2003.But I can select only stand alone root CA and the stand alone subordinate CA. Other two options are not highlighted. Can anybody give me ...
1
vote
1answer
637 views

Windows 2008 CA and Windows 2003 AD?

I have a Windows 2003 AD and I set up a root ca and a sub ca both of which are windows 2008(joined to domain).I need to use the sub ca to generate end user certificates for digital signature , they ...