Setup Overview
In case you have to re-install a server or to upgrade to a newer Windows Server Version you have to consider a few details. Please consult Microsoft documentation for AD CS migration. We differentiate between the two use cases
- Private Key on Primus HSM is exportable (can be included in backup), shown in section Migrating Private Key (Exportable)
- Private Key on Primus HSM is not exportable (backup of private key fails), shown in section Migrating Private Key (NOT Exportable) Note: the described procedure is related to a “StandaloneRootCa” and does not consider any do- main topics nor CRL/OCSP migration or changes. Migrations of operational CAs should be tested thoroughly in a lab environment.
warning
The following examples are related to the example Standalone root CA setup in this guide. Migrations of operational CAs should be tested thoroughly in a lab environment and are not covered in this guide.