|
|
|
|
|||||
|
|
|
|
|
|
|||
| Welcome
to Tech Support Forum home to more then 136,000 problems solved. Issues
have included: Spyware, Malware, Virus Issues, Windows, Microsoft,
Linux, Networking, Security, Hardware, and Gaming Getting your
problem solved is as easy as: 1. Registering for a free account 2. Asking your question 3. Receiving an answer Registered members: * See fewer ads. * And much more..
|
| Want to know how to post a question? click here | Having problems with spyware and pop-ups? First Steps |
|
|||||||
| Security and Firewalls Protecting you against unwanted people and programs |
 |
|
|
LinkBack | Thread Tools |
02-12-2009, 10:48 AM
|
#1 (permalink) |
|
Registered User
Join Date: Feb 2009
Posts: 1
OS: 2003 ent svr sp2
|
PKI -- changing CA keys to 2048
[ is this the right forum? ]
We have a solid corporate PKI, with offline Root and Intermediate CAs, and online Issuing enterprise CAs in our AD forest. We need to migrate everything from the original 1024-bit CA keys to 2048 or perhaps 4096-bit keys. I suppose one option (and it's been suggested) is to build a new mirror PKI and gradually age out the old one, but this seems extreme. How do we re-key our Windows Root, Intermediate and Issuing CAs with larger private keys and preserve our very substantial investment in this corporate PKI? (The CAs are running 2003 server, and we expect to go to 2008 server at some point, though not necessarily this year.) Thanks for your ideas, Lynn |
|
     
|
| Important Information |
|
Join the #1 Tech Support Forum Today - It's Totally Free!
TechSupportForum.com is a leading support website for your computer needs. We offer free, friendly and personalized computer support. Why pay to have your computer fixed when you can do it for free. Join TechSupportforum.com Today - Click Here |
|
| Thread Tools | |
|
|
