question

LazherYAAKOUBI-7887 avatar image
0 Votes"
LazherYAAKOUBI-7887 asked LazherYAAKOUBI-7887 commented

Moving SCCM to new Root CA

Hi,

I plan to remove and reconfigure Root CA in my environment, the SCCM infrastructure uses a PKI, so my question, if I remove the Root CA server and configure another one, I need to configure the SCCM environment with a new certificate from the new root CA or I have to use some other method to do it.

Thanks.
A+

mem-cm-general
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

Jason-MSFT avatar image
1 Vote"
Jason-MSFT answered LazherYAAKOUBI-7887 commented

You can have multiple root CAs to help facilitate a slower transition. The root CA configured ion the client communication tab of the site is used for client cert selection and this CA is also added as a trusted root on devices going through OSD.

What's happening to old root CA?

· 5
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I have some requirements to redeploy a new root CA.

0 Votes 0 ·
Jason-MSFT avatar image Jason-MSFT LazherYAAKOUBI-7887 ·

Right, not questioning that but it doesn't answer the question of what's going to happen to the old root CA and when it will happen (if anything)?

0 Votes 0 ·

for some requirements I plan to change the configuration of the root CA, in this case, I have to re-deploy it.

0 Votes 0 ·
Show more comments