question

NamlessShelter-6097 avatar image
0 Votes"
NamlessShelter-6097 asked NamlessShelter-6097 commented

InPlace Upgrade CA server 2012 to 2016

Hi There, please help..

We have an old CA server running windows 2012. I am planning to do a In-Place upgrade: run a Windows installer 2016 installer and upgrade directly on CA01 server (Win server 2012), and finished the upgrade process on the same box. So, IP, Hostname Root CA name etc will be the same....Is this totally a OK thing to do? Any potential issues?

Also, If I migrate Root CA properly to a complete new server 2019 box, CDP entries and etc will be updated automatically after I import the backup files and reg etc?

Guide I would follow; https://techcommunity.microsoft.com/t5/itops-talk-blog/step-by-step-migrating-the-active-directory-certificate-service/ba-p/697674

Thanks a lot,
Nameless

windows-server-security
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

LimitlessTechnology-2700 avatar image
0 Votes"
LimitlessTechnology-2700 answered

Hello,

Thank you for your question.

It should be fine as far as your Windows 2012 to 2016 OS upgrade is successful and without any issues.
Please take backup of this VM before any migration and upgrade also uninstall any Antivirus software before OS upgrade.


If the reply was helpful, please don’t forget to upvote or accept as answer.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

LimitlessTechnology-2700 avatar image
0 Votes"
LimitlessTechnology-2700 answered NamlessShelter-6097 commented

Hello again @NamlessShelter-6097

Additionally,

In-Place upgrade for CA may work but is not recommended as there are many issues reported from users after that operation. the recommendation would be Migrating the CA between the "old" server and "new" server.

There is a previous thread with this question, you can read more about ir here: https://docs.microsoft.com/en-us/answers/questions/480188/ca-server-in-place-upgrade-from-server-to-server-2.html

Also I have found this guide with some step by step and screenshots that may be helpful for you: https://techcommunity.microsoft.com/t5/itops-talk-blog/step-by-step-migrating-the-active-directory-certificate-service/ba-p/697674

Hope this is useful for you,
Best regards,

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Cool thanks,

Is there any way we can find out CRL on CA server?

ML

0 Votes 0 ·