At the turn of the year, a note to all operators of a Microsoft certification authority and connected services:
The end of Microsoft product support for Windows Server 2012 and 2012 R2 is slowly approaching: it is October 10, 2023.
Thus, it is time to prepare for the move to a new operating system.
If a Certificate Enrollment Web Service (CES) is operated in the network, after the "Migration of an Active Directory integrated certification authority (Enterprise Certification Authority) to another server ", the configuration of the CES must be adapted to the new situation.
A configuration string (Config String) is stored in the configuration of the CES, which contains the server name of the connected certification authority. If this changes, the configuration must be adjusted accordingly.
At the latest when the End of product support by the manufacturer (Microsoft) approaches, the question arises as to how and to which operating system a certification authority should be migrated.
Continue reading "Windows Server Migration Matrix for the Certification Authority"
Often a certification authority lives significantly longer than the server on which it was installed. Reasons for migrating the certification authority to a new server, i.e. while retaining the data, can be:
The procedure for migration is described in detail below.
Each Windows Server operating system has a defined end date after which there is no longer any product support from the manufacturer. Certification authorities are also bound to this date, and should therefore be migrated before this date expires.
Continue reading "End of product support by the manufacturer (Microsoft)"