Score:0

Retire internal Windows root CA

sd flag

A former colleague created an internal root CA named CA1 with server2008. During migration to a newer OS version a Server CA2 was created and CA1 turned off. Now my problem is, all systems still think they have to ask CA1 to get new certificates. So how do I tell them that CA1 does not exist anymore and they have to ask CA2?

If I open pkiview.msc on one of these servers it lists both servers as certificate authorithies.

Score:1
cn flag

You need to decommission old CA from Active Directory using the following TechNet Wiki article: How to Decommission a Windows Enterprise Certification Authority and How to Remove All Related Objects

since your old CA is off, you need to complete only steps: 6, 7 and 9. Other steps are not applicable. After cleaning Active Directory from old CA remnants, make sure it will never be powered on.

Score:0
za flag

If someone, is looking for the complete Way

You can take a look here

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.