hardware upgrade of certification authorities - advice needed

Hi all,

In a few weeks I plan to carry out a hardware refresh on the domain
controllers in our root domain. Two of the domain controllers run Microsoft
certificate services - one an Enterprise CA and the other a subordinate.

The replacement domain controllers are already on the network with temporary
names. For the cutover I plan to demote the existing domain controllers and
rename the new ones so that they assume the names of their predecessors.

A simple exercise except for the two CAs

I've printed off the KB Article 298138 - How to move a certification
authority to another server.

So.. a question for the newsgroup - is there any particular order in which I
should "move" the CAs? Should I do the subordinate CA first or should I
start with the Enterprise? Are there any "gotchas" to this exercise?

Any input on this much appreciated.

--
Peter <X-Files fan>