New AD CS doc: Migrating a Certification Authority from a CSP to a KSP

Just published: Migrating a Certification Authority Key from a Cryptographic Service Provider (CSP) to a Key Storage Provider (KSP) - and optionally, migrating from SHA-1 to SHA-2.

If you have a CA that you installed and configured a while ago and you're now able to implement these stronger security options, use this how-to and verification steps.

Comments

  • Anonymous
    January 01, 2003
    thank you
  • Anonymous
    November 06, 2015
    Does the article also apply to Windows Server 2008 R2 as well. It seems like it does but the article only stats Server 2012 and Server 2012 R2.