Certificate Authority has gone bang

[ozydave]

My internal domain Certificate authority has gone bang.

I can’t get it back (that’s another story)

 

Currently my domain laptops connect via wireless authenticating against NPS. As the certificate pushed out to the clients is still valid the laptops are still connecting.

 

I cant get the CA back. My domain still thinks the CA is there but just can’t contact it.

Read a few posts on the net where a similar thing has happened and they have just setup a new server with the old server name joined it to the domain and installed the CA role.

 

Anyone think this is the way to go?

Or just setup a new CA, get it issuing certificates for NPS, but how do I remove the failed CA from the domin?

 

 

Cheers

[3s-gtech]

I've replaced one before - basically just set up the new server, add the role, make sure it's integrated and seen by the domain, start replacing certs as you need to. It's not too painful a process.