Windows Server 2008 R2 Certificate Authority Benefits (backup user certs)

i looking migrating ca 2003 2008 r2 , wondering if has found white papers on difference between two.  i've seen lot of articles on migrating 2008 r2 seem pretty straight forward.  one of main concerns , reasons switch users not backup users cert , key.  does 2008 r2 provide auto backup of each users individual cert , private key?  or still have done on each individual users pc?  can export , users certificate , key 2008 r2?  i know can't 2003 ca.  any great, thanks!

hi,

based on research, don’t have backup certificates , keys on client machines during migration process, , don’t think windows server 2008 r2 provides automatic backup each user’s individual certificate , private key.

what need manually backing ca database, private key, registry settings , policy.inf information on ca server.

actually, user certificates reside in:

documents , settings\< username>\applicationdata\microsoft\systemcertificates\my\certificates

for each user profile. roaming profiles, user's certificates located on domain controller certificates follow users when log on different computers in domain.

in regard third question, answer we can export certificate private key windows server 2008r2, , users or local administrators minimum group membership required complete procedure.

here related links below useful you:

active directory certificate services migration guide

http://technet.microsoft.com/en-us/library/ee126170(v=ws.10).aspx

how certificates stored

http://technet.microsoft.com/en-us/library/cc962104.aspx

certificates tools , settings

http://technet.microsoft.com/en-us/library/cc787544(v=ws.10).aspx

export certificate private key

http://technet.microsoft.com/en-us/library/cc754329.aspx

please feel free let me know if didn’t understand correctly.

best regards,

amy wang

Windows Server  >  Security