Upgrade a tow tier PKI to Windows 2019

bizcntradmin 191 Reputation points
2020-09-07T12:37:15.503+00:00

Hi Guys,

We have a two tier PKI environment in production both are Windows 2012 R2.

  1. Is it possible to upgrade the OS to Windows 2019
  2. How to upgrade? which one to upgrade first the root or the sub ca?
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,774 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vadims Podāns 9,116 Reputation points MVP
    2020-09-07T16:36:59.573+00:00
    1. yes, it is possible: https://video2.skills-academy.com/en-us/windows-server/upgrade/upgrade-2012r2-to-2019
    2. doesn't matter in which order you do. Windows Server 2019 adds no features to CA, so the order is irrelevant.
    0 comments
  2. Hannah Xiong 6,256 Reputation points
    2020-09-08T02:25:36.437+00:00

    Hello,

    Thank you so much for posting here.

    Yes, it is possible to upgrade the OS to Windows 2019. But in-place upgrade is not recommended. There is discussion about this issue at the end of this article. We could kindly have a check.

    23161-111.png

    https://techcommunity.microsoft.com/t5/itops-talk-blog/step-by-step-migrating-the-active-directory-certificate-service/ba-p/697674

    Since it is a two tier PKI environment, we could upgrade the CA one by one. When migrating a CA, the computer name of the target computer can differ from the computer name of the source computer, but the CA name must stay the same.

    We could follow the above link to get more details about how to migrate a PKI server to anoter server.

    For any question, please feel free to contact us.

    Best regards,
    Hannah Xiong

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.