none
CA upgrade question

    Question

  • I'm following the AD CA Migration guide and I have a question where I'm seeking a little clarification.

    http://technet.microsoft.com/en-us/library/ee126140(WS.10).aspx#BKMK_RestoreCA

    In the "Restoring the source CA registry settings on the destination server - To analyze the registry file" section. I'm comparing the source and destination reg files. Now the source server was originally a Windows 2000 server upgraded to Server 2003 and as such the system root folder is C:\WinNT\ where as the destination server is Server 2008 R2 with a system root of C:\Windows.

    Earlier in the doc it said to modify the exported reg file to the new location on the Destination server... So I changed the reg file locations for: DBDirectory, DBLogDirectory, DBSystemDirectory and DBTempDirectory from C:\\WINNT\\ to C:\\Windows\\

    But in step 4 here it says to "either update the values in the file or remove them from the file so the default settings are preserved on the target CA". So is this saying  I should just remove these settings in the registry so that it will use C:\Windows?

    Thanks

    R

     
    • Moved by AwinishMVP Thursday, September 05, 2013 5:27 AM
    Wednesday, September 04, 2013 6:21 PM

Answers

  • As indicated in that article, "If there is a mismatch between the source and the target CA, either update the values in the file or remove them from the file so that the default settings are preserved on the target CA."

    I suggest we just remove them to avoid unexpected issue.
    Thursday, September 05, 2013 6:28 AM

All replies

  • That's my understanding - i.e. you should remove these settings if you already modified them directly in the registry.

    If you are looking for additional confirmation, you might want to post your further questions on the Security forum - http://social.technet.microsoft.com/Forums/en-US/home?forum=winserversecurity

    hth
    Marcin

    Wednesday, September 04, 2013 6:33 PM
  • I haven't done anything as of yet... I did modify the reg file I exported to C:\\Windows\\  as I thought but I read this line and now I'm thinking I just need to remove the line but it's not clear.

    Also, its my understanding that Enterprise CA questions go into the Directory Services category...

    Thanks

    R

    Wednesday, September 04, 2013 6:37 PM
  • Hi,

    Thanks for your response.

    About the CA question,there is a special forum as Marcin mentioned.

    http://social.technet.microsoft.com/Forums/en-US/home?forum=winserversecurity

    If you have any CA question, you can post there.

    Regards.

    If you have any feedback on our support, please click here


    Vivian Wang
    TechNet Community Support

    • Proposed as answer by AwinishMVP Thursday, September 05, 2013 6:06 AM
    Thursday, September 05, 2013 5:10 AM
    Moderator
  • As indicated in that article, "If there is a mismatch between the source and the target CA, either update the values in the file or remove them from the file so that the default settings are preserved on the target CA."

    I suggest we just remove them to avoid unexpected issue.
    Thursday, September 05, 2013 6:28 AM
  • Hi,

    I would like to confirm the current situation.

    Please feel free to let us know if you need further assistance.

    Regards.

    If you have any feedback on our support, please click here


    Vivian Wang
    TechNet Community Support

    Monday, September 09, 2013 1:43 AM
    Moderator