Enterprise CA on Win2k3 Standard (32 bit) toooo Win2k8 R2 (64 bit)

Discussion in 'Server Setup' started by fixthisbox, Aug 11, 2009.

  1. fixthisbox

    fixthisbox Guest

    In my active directory structure, I have a domain controller that is WIN2k3
    Standard (32 bit) with Enterprise Certificate Services installed..

    Wanting to move to all WIN2k8 R2 (64 Bit) domain controllers, how can I
    transfer / upgrade this system (or Certificate Services) to eventually get my
    forest to a WIN2k8 Native mode?
     
    fixthisbox, Aug 11, 2009
    #1
    1. Advertisements

  2. Meinolf Weber [MVP-DS], Aug 11, 2009
    #2
    1. Advertisements

  3. fixthisbox

    fixthisbox Guest

    IM just getting started reviewing these documents, but correct me if IM
    wrong, Win2k8 R2 only comes in 64 Bit? (No upgrade path)

    Only one Enterprise root can exist per forest?

    Rebuilding the server (win2k8 64 bit, with same name, promoted to a DC,
    restoring the CA EDB ) would be useless considering the CA EDB is a 32 bit
    format?

    Uninstalling the CA (yes invalidating any existing certs) then reinstall the
    CA on Win2k8 R2 seems to be the only option??? Is this do able????


    Thanks
     
    fixthisbox, Aug 11, 2009
    #3
  4. Hello fixthisbox,

    See inline.

    Best regards

    Meinolf Weber


    Yes, 2008 R2 comes only as 64bit.
    You can have more but not recommended:
    http://www.1-script.com/forums/More-than-one-enterprise-root-CA-in-a-forest-article2639--19.htm

    http://social.technet.microsoft.com...y/thread/cca58977-7f28-4211-aaf6-8b7730fcdb11
    You can not use 32bit OS backup to restore 64bit OS. But if you see http://technet.microsoft.com/en-us/library/cc742388(WS.10).aspx
    there is also described the change from 32 to 64 bit CA.
     
    Meinolf Weber [MVP-DS], Aug 11, 2009
    #4
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.