Skip to main content

Setup Overview

In case you have to re-install a server or to upgrade to a newer Windows Server Version you have to consider a few details. Please consult Microsoft documentation for AD CS migration. We differentiate between the two use cases

  1. Private Key on Primus HSM is exportable (can be included in backup), shown in section Migrating Private Key (Exportable)
  2. Private Key on Primus HSM is not exportable (backup of private key fails), shown in section Migrating Private Key (NOT Exportable) Note: the described procedure is related to a “StandaloneRootCa” and does not consider any do- main topics nor CRL/OCSP migration or changes. Migrations of operational CAs should be tested thoroughly in a lab environment.
warning

The following examples are related to the example Standalone root CA setup in this guide. Migrations of operational CAs should be tested thoroughly in a lab environment and are not covered in this guide.