none
請教關於移轉CA問題 RRS feed

解答

  • Hi edison_ting

    這兩個值也需要修改為目的電腦名稱

    Modify the values of the following registry settings by replacing the source server name with the destination server name.

    noteNote
    In the following list, CACertFileName and ConfigurationDirectory values are created only when certain CA installation options are specified. If these two settings are not displayed, you can proceed to the next step.

    • CAServerName
    • CACertFileName
    • ConfigurationDirectory – This value should appear in Windows Registry under the following location: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\CertSvc\Configuration.


    請記得將對您有幫助的回覆"標示為解答"以幫助其他尋找解答及參與社群討論的朋友們。

    Please remember to click Mark as Answer on the post that helps you. This can be beneficial to other community members reading the thread.


    • 已編輯 George.Chang 2014年9月30日 上午 02:39
    • 已標示為解答 edison_ting 2014年9月30日 上午 03:13
    2014年9月30日 上午 02:39

所有回覆

  • 您好,

    我的作法是將

    1.DC先從WS2003 Upgrade WS2008 R2,確定沒問題後再將DC升級為WS2012 R2

    2.New CA Server加入網域,安裝全新的根憑證後,再將網域中的需要憑證伺服器例如(Exchange Server)重新指向此伺服器就可以了.如此一來,就不需擔心轉移風險了,若其它伺服器也需指向New CA的話,須一一手動更新憑證.環境不多更新的憑證伺服器,就可以這麼作囉!

    提供您參考,希望對您有所幫助

    謝謝.

    2014年9月30日 上午 01:43
  • Hi edison_ting

    兩篇都有提到如果目標的Server名稱不一樣,必須修改CAServerName值。

    If the target CA's computer name is different from the source CA's computer name, search the file for the host name of the source CA computer. For each instance of the host name found, ensure that it is the appropriate value for the target environment. Change the host name, if necessary. Update the CAServerName value.


    請記得將對您有幫助的回覆"標示為解答"以幫助其他尋找解答及參與社群討論的朋友們。

    Please remember to click Mark as Answer on the post that helps you. This can be beneficial to other community members reading the thread.

    2014年9月30日 上午 01:49
  • 大家好

    另外一個問題是我在registry裡面的configuration除了CAServerName的值要改,我看到有兩個值也是有指定server name,有一個叫ConfigurationDirectory,如下:

    以及這一個值CACertFileName,如下:

    教學裡面沒有提到,請問這兩個值匯進去之前是不是也要改成新的server name?



    2014年9月30日 上午 01:53
  • Hi edison_ting

    這兩個值也需要修改為目的電腦名稱

    Modify the values of the following registry settings by replacing the source server name with the destination server name.

    noteNote
    In the following list, CACertFileName and ConfigurationDirectory values are created only when certain CA installation options are specified. If these two settings are not displayed, you can proceed to the next step.

    • CAServerName
    • CACertFileName
    • ConfigurationDirectory – This value should appear in Windows Registry under the following location: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\CertSvc\Configuration.


    請記得將對您有幫助的回覆"標示為解答"以幫助其他尋找解答及參與社群討論的朋友們。

    Please remember to click Mark as Answer on the post that helps you. This can be beneficial to other community members reading the thread.


    • 已編輯 George.Chang 2014年9月30日 上午 02:39
    • 已標示為解答 edison_ting 2014年9月30日 上午 03:13
    2014年9月30日 上午 02:39