Active Directory Certificate Services: Migrating and Renewing CA Servers

When upgrading your network infrastructure, transitioning to a new Certification Authority (CA) server without disrupting active production services is a critical task. This text-only course provides a clear, conceptual walkthrough of Active Directory Certificate Services (AD CS) migrations, ensuring you can issue and renew certificates seamlessly. You will learn how to manage side-by-side CA deployments and safely decommission legacy infrastructure. By following this written guide, you will gain the knowledge needed to transition your public key infrastructure (PKI) with zero downtime, maintaining secure communications across your servers. What you'll learn: - Understand core AD CS concepts, trust chains, and certificate templates - Configure side-by-side CA servers to coexist peacefully in a production environment - Manage certificate auto-enrollment and manual renewal from a new CA server - Transition client and server authentication certificates to the new root of trust - Revoke old certificates and decommission legacy CA servers safely - Implement modern PKI security practices, including basic zero-trust concepts The course begins with foundational PKI definitions and trust structures, moves into side-by-side deployment strategies, and finishes with step-by-step renewal workflows and decommissioning processes. This course is designed for junior system administrators, network engineers, and IT professionals who are new to PKI management and need to execute a safe server certificate migration. No advanced cryptography background is required.