Certificate Infrastructure - Domain Upgrade Question

We are preparing to upgrade our 2003 domain environment to 2008 and are
trying to get an idea on certain applications, services and roles which will
need to be upgraded. Currently, we are using a 2003 member server as an
enterprise CA. We use this for PEAP authentication w/ IAS for our wireless
infrastructure security. After upgrading our domain controllers and domain to
2008, will this standalone CA still function properly or will it need to be
upgraded to 2008 in order to function? I can't seem to find any definite
answer from reading any articles and any help would be greatly appreciated.

Thank you.

Hi, SPP-IT,

I just have a clarification question for you, regarding your member server.
First you call it an enterprise CA, and then you referred to it as "this
standalone CA".

So, I need to know which one is correct. If it's truly a standalone CA,
then the upgrade on the DC's to Server 2008 should not be a problem. It can
remain as Windows Server 2003.

Of course, upgrading it will give you all of the superior Windows Server
2008 functionality and tools, etc!

David M. Franklyn
MCDST, MCTS¹¹, MCSA², MCDBA, MCSE³, MCITP 6, MCT,
Microsoft Small Business Specialist, Network+, Security+, Server+
Senior Information Technology Trainer
Advanced Training Group, Continuing Education
Auburn University Montgomery


"SPP-IT" <> wrote in message
news:B9AA2AC2-F7B6-4E77-A964-...
> We are preparing to upgrade our 2003 domain environment to 2008 and are
> trying to get an idea on certain applications, services and roles which
> will
> need to be upgraded. Currently, we are using a 2003 member server as an
> enterprise CA. We use this for PEAP authentication w/ IAS for our wireless
> infrastructure security. After upgrading our domain controllers and domain
> to
> 2008, will this standalone CA still function properly or will it need to
> be
> upgraded to 2008 in order to function? I can't seem to find any definite
> answer from reading any articles and any help would be greatly
> appreciated.
>
> Thank you.

Dave,

Thanks for your response. To clarify, I installed it as an enterprise CA,
however it's not installed on a DC. It's on a standalone member server. We
will upgrade the CA to 2008, however I want to make sure it will still work
until we get to that particular server. We want to upgrade all DC's first and
I wasn't sure if the CA will function correctly during the upgrade.

Thanks,
Jeff

"Dave Franklyn" wrote:

> Hi, SPP-IT,
>
> I just have a clarification question for you, regarding your member server.
> First you call it an enterprise CA, and then you referred to it as "this
> standalone CA".
>
> So, I need to know which one is correct. If it's truly a standalone CA,
> then the upgrade on the DC's to Server 2008 should not be a problem. It can
> remain as Windows Server 2003.
>
> Of course, upgrading it will give you all of the superior Windows Server
> 2008 functionality and tools, etc!
>
> David M. Franklyn
> MCDST, MCTS¹¹, MCSA², MCDBA, MCSE³, MCITP 6, MCT,
> Microsoft Small Business Specialist, Network+, Security+, Server+
> Senior Information Technology Trainer
> Advanced Training Group, Continuing Education
> Auburn University Montgomery
>
>
> "SPP-IT" <> wrote in message
> news:B9AA2AC2-F7B6-4E77-A964-...
> > We are preparing to upgrade our 2003 domain environment to 2008 and are
> > trying to get an idea on certain applications, services and roles which
> > will
> > need to be upgraded. Currently, we are using a 2003 member server as an
> > enterprise CA. We use this for PEAP authentication w/ IAS for our wireless
> > infrastructure security. After upgrading our domain controllers and domain
> > to
> > 2008, will this standalone CA still function properly or will it need to
> > be
> > upgraded to 2008 in order to function? I can't seem to find any definite
> > answer from reading any articles and any help would be greatly
> > appreciated.
> >
> > Thank you.
>

Yes, you can upgrade DC's to 2008 while your CA remains 2003. But do keep
in mind, the 2008 CA role (and now it's an Active Directory role) has all
kinds of new features and less headache/potential for problems!

Dave

"SPP-IT" <> wrote in message
news:0C01B286-3F8E-4D40-BA46-...
> Dave,
>
> Thanks for your response. To clarify, I installed it as an enterprise CA,
> however it's not installed on a DC. It's on a standalone member server. We
> will upgrade the CA to 2008, however I want to make sure it will still
> work
> until we get to that particular server. We want to upgrade all DC's first
> and
> I wasn't sure if the CA will function correctly during the upgrade.
>
> Thanks,
> Jeff
>
> "Dave Franklyn" wrote:
>
>> Hi, SPP-IT,
>>
>> I just have a clarification question for you, regarding your member
>> server.
>> First you call it an enterprise CA, and then you referred to it as "this
>> standalone CA".
>>
>> So, I need to know which one is correct. If it's truly a standalone CA,
>> then the upgrade on the DC's to Server 2008 should not be a problem. It
>> can
>> remain as Windows Server 2003.
>>
>> Of course, upgrading it will give you all of the superior Windows Server
>> 2008 functionality and tools, etc!
>>
>> David M. Franklyn
>> MCDST, MCTS¹¹, MCSA², MCDBA, MCSE³, MCITP 6, MCT,
>> Microsoft Small Business Specialist, Network+, Security+, Server+
>> Senior Information Technology Trainer
>> Advanced Training Group, Continuing Education
>> Auburn University Montgomery
>>
>>
>> "SPP-IT" <> wrote in message
>> news:B9AA2AC2-F7B6-4E77-A964-...
>> > We are preparing to upgrade our 2003 domain environment to 2008 and are
>> > trying to get an idea on certain applications, services and roles which
>> > will
>> > need to be upgraded. Currently, we are using a 2003 member server as an
>> > enterprise CA. We use this for PEAP authentication w/ IAS for our
>> > wireless
>> > infrastructure security. After upgrading our domain controllers and
>> > domain
>> > to
>> > 2008, will this standalone CA still function properly or will it need
>> > to
>> > be
>> > upgraded to 2008 in order to function? I can't seem to find any
>> > definite
>> > answer from reading any articles and any help would be greatly
>> > appreciated.
>> >
>> > Thank you.
>>