
I think that previous admins was not stick to the Best Practices at all. Hi, I have found that previous Certification Authorities on network was deleted some time ago and now we are having some problems related to Certificates. Which way is best and how would it be done? What about reissuing all the active certificates from the current server to replace them with new certificates from the new server and then decommissioning the original CA? Can this be automated in some way? What is the best way to handle this? I don't think the migration from Exchange 2010 to 2013 allows for reusing the same host name on the replacement server and if we move the CA to another existing server, it will also be on a server with a new hostĬan we migrate the CA to a new server with a different host name? So, we will either need to move the CA to the new replacement Exchange 2013 server or some other existing server that's being used for something else (maybe one of the domain controllers).


#CERTUTIL WINDOWS 2000 LICENSE#
The old VMĬontaining Exchange 2010 and the current CA will go away since we cannot afford to use the server resources and use up the required Windows license to keep that server running doing nothing but acting as a CA. Exchange is being migrated from 2010 to 2013, so all current Exchange servers will decommissioned and replaced with new new Hyper-V VMs with either Server 2008 R2 or 2012 R2 OS. Our internal CA is installed on one of our Exchange servers.
