Thursday, February 07, 2013 11:00 PMHi, we are new to certificate services. We have a couple of Windows Server 2003 domain controllers with multiple domains in the same forest. Our forest and domain functional level is Windows Server 2003. Can we install the roles required for an Enterprise CA on a member server with Windows Server 2012 (excluding Certificate Enrollment Web Service) without any issues to our environment? What changes if any are made in AD? (We understand that the Public Key Services container is updated in AD Sites & Services). Thanks!
Friday, February 08, 2013 1:29 AMhi, with a 2003 AD you can definately install a Enterprise CA with Certificate services and CA web enrollment. The certificate templates will be updated when you run first time the MMC for certificate templates. certtmpl.msc regards, lutz
- Marked As Answer by yourtechguy Friday, February 08, 2013 5:18 PM
Friday, February 08, 2013 2:17 AM
You will need to have the Windows Server 2008 R2 schema applied to install all of the available role services. The CEPS and CES role service require extensions added in the Windows Server 2008 R2 schema.
As for a simple CA, you will be able to install that with no problems.
- Marked As Answer by yourtechguy Friday, February 08, 2013 5:17 PM