migrating from Win2003 Ent CA to a 2-tier CA infrastructure WINDOWS 2008

[ShastriJI]

Hello,
the windows 2003 32bit active enterprise ca is currently working on my machine, i would like to modify it Win2008R2 64-bit Enterprise Edition,so anyone please help me to know whether i have to back up the old private keys,and how to do the migration of the templates and certificates.How can be installation process so that i may overcome this issue.

[Rawko]

The question which you have in your mind about the migration from Win 2003 CA to Win 2008 CA,i feel that you are deploying the existing system rather then migrating from 32 bit win2003 to 64 bit win2008,as you are worried about the backup for the private keys,it is not so mostly required as the name, domain and the forests get totally changed.

[deoWo]

As per your case of migrating from Win2003 Ent CA to a 2-tier CA infrastructure WINDOWS 2008,i would like to recommend that the same certificate templates which are available for the existing system has to be maintained even after the migration takes place, here you not only migrate the CA but establish the new CA.The backup for the 32 bit 2003 is possible and is able to restore the database to the 64 bit 2008r2.

[Fabian]

The requirement for you is to migrate win2003 to win2008 enterprise CA,here the windows 2008 enterprise CA is available in its own forests so you feel to use in cross-forests certificate enrollment with other forests at windows 2003 level then auto enrollment has to be done,but there will be some features missing on win2008,for the auto enrollment to work properly there is on requirement to install Certification Authority,this just required to avoid the error of that you cannot copy the object in the enrollment services when you will try to copy objects from resources forest to the account forest,then you will able to upgrade to win2008 and all features of 2008 CA can be used.