It's time: Migrating the PKI components from Windows Server 2012 to a new operating system

At the turn of the year, a note to all operators of a Microsoft Certification Authority and connected services:

The End of product support from Microsoft for Windows Server 2012 and 2012 R2 is slowly approaching, it is the October 10, 2023.

Thus, it is time to prepare for the move to a new operating system.

The recommended and in many cases the most sensible approach is the Migration to another server with updated, long-term supported operating system version.

Alternatively, an in-place upgrade is also an option. For this, see the following articles:

• In-Place Upgrade of a Certification Authority from Windows Server 2012 SP2 or 2012 R2 to Windows Server 2016
• In-Place Upgrade of a Certification Authority from Windows Server 2012 R2 or 2016 to Windows Server 2019

For migration paths supported by the manufacturer see Windows Server Migration Matrix for the Certification Authority.

Of course, it is also possible to rebuild in parallel with a current operating system and move the individual use cases to it.

Related links:

• End of product support by the manufacturer (Microsoft)
• Migration of an Active Directory integrated certification authority (Enterprise Certification Authority) to another server