Upgrade from Standalone to Enterprise

Hi, Have a Root and Subordinate CA both on Server 2003 Standard running as
standalone. Also have a 3rd teir issuing server running as Enteprise CA on
2003 Server Enterprise.

I may need to u pgrade everythign to Enterprise CA's. I know I have to
basically backup the 2 CA's and then install CA Enterprise and restore. My
question is about the 2nd Sub ordinate and 3rd teir Entrprise issuing server
which I issues out of the 2nd tier Sub ordinate. Do I have to reinstall
that? Will it continue to work or do I have to create that aswell? I assume
if I have to recreate them all my template may be lost?

Can anyone advise

 

The way I read it is that you have this:
Root -> Subordinate -> Issuing

You want to change Root & Sub to Enterprise?
Issuing is already Enterprise, correct?

What is your question again please?


"Gunna" wrote:
<!--coloro:blue--><span style="color:blue <!--/coloro-->
> Hi, Have a Root and Subordinate CA both on Server 2003 Standard running as
> standalone. Also have a 3rd teir issuing server running as Enteprise CA on
> 2003 Server Enterprise.
>
> I may need to u pgrade everythign to Enterprise CA's. I know I have to
> basically backup the 2 CA's and then install CA Enterprise and restore. My
> question is about the 2nd Sub ordinate and 3rd teir Entrprise issuing server
> which I issues out of the 2nd tier Sub ordinate. Do I have to reinstall
> that? Will it continue to work or do I have to create that aswell? I assume
> if I have to recreate them all my template may be lost?
>
> Can anyone advise<!--colorc--><!--/colorc-->

 

Yes this is right:<!--coloro:blue--><span style="color:blue <!--/coloro-->
> Root -> Subordinate -> Issuing <!--colorc--><!--/colorc-->

Issuing is Enterprise, Root and Sub is standalone.

My question is this. I have to convert the 2 standalones to enterprise. I
know I can do that by backing up PKI, uninstall, reinstall as Enterprise and
restore PKI. As i do this am I likely to break any of the 100's or
certificates that have been issed by my Issuing CA?

"tomasz" wrote:
<!--coloro:blue--><span style="color:blue <!--/coloro-->
> The way I read it is that you have this:
> Root -> Subordinate -> Issuing
>
> You want to change Root & Sub to Enterprise?
> Issuing is already Enterprise, correct?
>
> What is your question again please?
>
>
> "Gunna" wrote:
> <!--coloro:green--><span style="color:green <!--/coloro-->
> > Hi, Have a Root and Subordinate CA both on Server 2003 Standard running as
> > standalone. Also have a 3rd teir issuing server running as Enteprise CA on
> > 2003 Server Enterprise.
> >
> > I may need to u pgrade everythign to Enterprise CA's. I know I have to
> > basically backup the 2 CA's and then install CA Enterprise and restore. My
> > question is about the 2nd Sub ordinate and 3rd teir Entrprise issuing server
> > which I issues out of the 2nd tier Sub ordinate. Do I have to reinstall
> > that? Will it continue to work or do I have to create that aswell? I assume
> > if I have to recreate them all my template may be lost?
> >
> > Can anyone advise<!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->

 

Just follow these steps and everything will work out just fine:



"Gunna" wrote:
<!--coloro:blue--><span style="color:blue <!--/coloro-->
> Yes this is right:<!--coloro:green--><span style="color:green <!--/coloro-->
> > Root -> Subordinate -> Issuing <!--colorc--><!--/colorc-->
>
> Issuing is Enterprise, Root and Sub is standalone.
>
> My question is this. I have to convert the 2 standalones to enterprise. I
> know I can do that by backing up PKI, uninstall, reinstall as Enterprise and
> restore PKI. As i do this am I likely to break any of the 100's or
> certificates that have been issed by my Issuing CA?
> <!--colorc--><!--/colorc-->

 

Yes I have seen that previously and I have done a practice run through in a
lab, thanks. That raises another question.

I am going to migrate from Standalone to Enterprise while moving to new
hardware also. I know the server name has to be the same. The question is
can I go from O\S Standard Edition to O\S Enterprise Edition wile i migrate
to the new hardware or do I have to first upgrade the original server to
Enterprise Edition O\S and then migrate to new hardware with Enterprise
edition O\S

Thanks


"tomasz" wrote:
<!--coloro:blue--><span style="color:blue <!--/coloro-->
> Just follow these steps and everything will work out just fine:
>
>
>
> "Gunna" wrote:
> <!--coloro:green--><span style="color:green <!--/coloro-->
> > Yes this is right:<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
> > > Root -> Subordinate -> Issuing <!--colorc--><!--/colorc-->
> >
> > Issuing is Enterprise, Root and Sub is standalone.
> >
> > My question is this. I have to convert the 2 standalones to enterprise. I
> > know I can do that by backing up PKI, uninstall, reinstall as Enterprise and
> > restore PKI. As i do this am I likely to break any of the 100's or
> > certificates that have been issed by my Issuing CA?
> > <!--colorc--><!--/colorc-->
> <!--colorc--><!--/colorc-->

 

OK, I assume you are going to first lab test this...here is what I would do:

Step 1.
Step 2. Configure your new hardware, and perform


Have a look at this as well.


Regards

 

On Thu, 28 May 2009 03:39:01 -0700, Gunna wrote:
<!--coloro:blue--><span style="color:blue <!--/coloro-->
> Issuing is Enterprise, Root and Sub is standalone.
>
> My question is this. I have to convert the 2 standalones to enterprise. I
> know I can do that by backing up PKI, uninstall, reinstall as Enterprise and
> restore PKI. As i do this am I likely to break any of the 100's or
> certificates that have been issed by my Issuing CA?<!--colorc--><!--/colorc-->

Why do you "have to" convert the root and subCa's to Enterprise in the
first place, and when you say "Enterprise" are you talking about upgrading
the OS from Standard to Enterprise or converting them from Standalone to
Enterprise CAs?

--
Paul Adare
MVP - Identity Lifecycle Manager

 

Paul,

Both. Firstly, i "have to" upgrade the Root and Sub to Enterprise
Certficate Services due to a requirement of another piece of software that we
are deploying. Im not happy about that erquirmetn but in the end I have no
say over the whole thing.

On top of that it also says that all the Enterprise Certifcate Services
server O\S has to be Enterprise edition as well. So I have to ugrade the
operatings system aswell as convert Standalone to Enterprise. I want to take
this oportunity to migrate to new hardware. So should I first upgrade the
operating system to enterrpsie edition on the old hardware and then migrate
to the new hardware or migrate to the new hardware (running server standard
edition) and then upgrade the operating system?

"Paul Adare" wrote:
<!--coloro:blue--><span style="color:blue <!--/coloro-->
> On Thu, 28 May 2009 03:39:01 -0700, Gunna wrote:
> <!--coloro:green--><span style="color:green <!--/coloro-->
> > Issuing is Enterprise, Root and Sub is standalone.
> >
> > My question is this. I have to convert the 2 standalones to enterprise. I
> > know I can do that by backing up PKI, uninstall, reinstall as Enterprise and
> > restore PKI. As i do this am I likely to break any of the 100's or
> > certificates that have been issed by my Issuing CA?<!--colorc--><!--/colorc-->
>
> Why do you "have to" convert the root and subCa's to Enterprise in the
> first place, and when you say "Enterprise" are you talking about upgrading
> the OS from Standard to Enterprise or converting them from Standalone to
> Enterprise CAs?
>
> --
> Paul Adare
> MVP - Identity Lifecycle Manager
>
> <!--colorc--><!--/colorc-->