Change from Root CA to Subordinate CA

Change from Root CA to Subordinate CA

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Change from Root CA to Subordinate CA Steve 02-02-2006
Posted by =?Utf-8?B?U3RldmU=?= on February 2, 2006, 11:36 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I currently have an Enterprise CA that issues certificates from a subdomain
in my network (usa.abc-company.com). I have several thousand certs already
issued. I now want to create an offline root CA in the forest root
(abc-company.com) and be able not to affect the certificates that I have
already issued.

1) Is is possible to change the role of a CA from enterprise ca to
subordinate?

Posted by S. Pidgorny on February 4, 2006, 7:07 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I don't believe you can change role from root CA to subordinate. Technically
that means that you need to sign the CA key with another CA and not self -
not sure if that is possible with Windows CA

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

>I currently have an Enterprise CA that issues certificates from a subdomain
> in my network (usa.abc-company.com). I have several thousand certs already
> issued. I now want to create an offline root CA in the forest root
> (abc-company.com) and be able not to affect the certificates that I have
> already issued.
>
> 1) Is is possible to change the role of a CA from enterprise ca to
> subordinate?



Similar ThreadsPosted
Convert Enterprise Root CA to Standalone Root CA and create new Subordinate CAs March 19, 2008, 1:45 am
root ca/subordinate ca October 3, 2007, 9:11 am
CAs: Enterprise root on parent domain, subordinate on child domain March 20, 2008, 10:28 am
root ca renewalkeylength change July 7, 2007, 6:29 pm
Change validatiy period of a Root certificate September 10, 2008, 11:05 pm
Clients no longer pick up the Root CA as a trusted root authority June 6, 2006, 6:59 pm
Migrating from single enterprise root CA to different root CA May 11, 2007, 6:43 am
subordinate ent CAs don't publish certs to AD after Win 2k3 SP1 July 23, 2005, 1:00 pm
PKI question, trusting subordinate CA January 1, 2006, 4:24 am
Stand-alone vs Enterprise subordinate CA? March 9, 2007, 12:23 pm

The site map in XML format XML site map

Contact Us | Privacy Policy