IT Employment

General discussion


Certificate Authority Removal

By stnkmstr ·
Does anybody know the correct way and/or ramifications if any, there may be on uninstalling an Enterprise CA from a
domain? I was searching Microsoft's web site and I couldn't find anything that was really helpful on removing existing certificates and what effect this would have on our existing domain. Our plan is to "redo" our whole PKI infrastructure for Smart Card deployment. We
already have a Enterprise CA setup with a Subordinate Enterprise CA that issues the certificates in our AD environment. I was thinking that I could manually revoke
all of the certificates and just uninstall the
Certificate Service from the Subordinate Certificate server and then decomission the Enterprise Certificate server by uninstalling the Certificate Service from that server as well. Every DC has a certificate and as does
every PC that was joined to the domain. Would revoking the Certificates and uninstalling the Certificate Service have any ramifications on DC replication or DC communications? Any help would be greatly appriciated. Thanks!

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Related Discussions

Related Forums