{"id":31759,"date":"2019-10-31T21:42:53","date_gmt":"2019-10-31T18:42:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/ne-udachnaya-migratsiya-certificate-authority-ca-s-windows-2008r-na-windows-2012-r2\/"},"modified":"2019-10-31T21:42:53","modified_gmt":"2019-10-31T18:42:53","slug":"ne-udachnaya-migratsiya-certificate-authority-ca-s-windows-2008r-na-windows-2012-r2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/ne-udachnaya-migratsiya-certificate-authority-ca-s-windows-2008r-na-windows-2012-r2","title":{"rendered":"Eba\u00f5nnestunud Certificate Authority (CA) migratsioon Windows 2008R-st Windows 2012 R2-le","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Tere, austatud lugeja,
\n R\u00e4\u00e4gin teile oma \u00f5udusunen\u00e4ost, mille ma kogesin CA migreerimisel Windows 2008R2 pealt Windows 2012 R2. Internetis on palju artikleid selle teema kohta, ja mingit probleemi ei pidanud olema. <\/p>\n

Kahjuks ei ole ma v\u00e4ga Windowsi administraator, olen rohkem *nix administraator, kuid \u00fclesanne CA migreerimine oli pandud \u2014 see pidi \u00e4ra tegema. <\/p>\n

Allpool r\u00e4\u00e4gin, kuidas ma selle protsessi l\u00e4bi tegin ja l\u00f5puks ei saanud ma just v\u00e4ga \u00f5nnelikku l\u00f5ppu.
\n<\/a><\/noindex>
\nNii et l\u00e4hme edasi\u2026
\nSisendisubmit:<\/b>
\nAllikas<\/b> \u2014 Windows 2008 R2 koos Root CA-ga
\nSihtpunkt<\/b> \u2014 Windows 2012R2<\/p>\n

Windows 2012R2 server oli mul juba installitud ja minimaalsetes seadistustes. <\/p>\n

Algne tegevusplaan oli j\u00e4rgmine (l\u00fchikese tegevused):<\/b>
\n1) Teeme CA + Privat Key varukoopia ja kopeerime selle jagatud kausta m\u00f5lema arvuti jaoks
\n2) V\u00e4ljastame sihtpunkti domeenist ja muudame IP-d
\n3) Teeme serveri snapshot'i
\n4) Muudame IP-d allika peal
\n5) Logime sisse uuele Windows 2012R2 serverile administraatorina \u2014 viime selle samasse domeeni sama nimega ja m\u00e4\u00e4rame vana IP
\n6) Paigaldame Active Directory Certificate Service'i (CA, CA Web Enrollment, NDES, Online Responder)
\n7) M\u00e4\u00e4rame, et tegu on Enterprise CA-ga
\n8) Taastame CA + Private Key varukoopiast
\n9) \u00d5nnelik l\u00f5pp<\/p>\n

Olge n\u00f5us, et midagi keerulist ei ole. Ja ma asusin elluviimisele. Tegelikult ei olnud mingeid probleeme ja k\u00f5ik l\u00e4ks libedalt\u2026 Teenus k\u00e4ivitus, sertifikaadi mallid ilmusid ja sertifikaadid ise ilmusid. \u00dches\u00f5naga, k\u00f5ik oli OK. Seet\u00f5ttu l\u00e4ksin magama. Homme ei tulnud mingeid kaebusi CA t\u00f6\u00f6 kohta, seega arvasin, et k\u00f5ik t\u00f6\u00f6tab, ja asusin teistele \u00fclesannetele. Nende lahendamisel vajas ma sertifikaati. Loodsin .csr ja l\u00e4ksin lingile vm_ca\/certsvc<\/noindex>, et sertifikaati allkirjastada ja saada, ja sel hetkel tekkis viga. Kahjuks ei teinud ma ekraanipilti, kuid seal r\u00e4\u00e4kis mismatche user informationist ja veel mingitest vigadest. Noh, ja olime kohal \u2014 m\u00f5tlesin ma. Alustasin googeldamist, kuid kahjuks ei leidnud ma midagi arusaadavat.<\/p>\n

\u00d5htuks otsustasime Windows 2012R2 CA kustutada ja k\u00f5ik uuesti installida ja siin tegin vea, valisin Enterprise CA asemel valiku Standalone CA (oma veast sain teada hiljem). Tehtud k\u00f5ik toimingud uuesti\u2026 k\u00f5ik l\u00e4ks vigadeta \u2014 kuid sertifikaadi mallide valimisel sain Element not found, kuigi kui valin Manage \u2014 siis mallid on kohal.
\n M\u00f5tlesin, et v\u00f5ib-olla ei ole \u00f5igusi antud CN=Certificate Templates jaoks, seet\u00f5ttu andsin ADSI Edit'i abil vm_ca$-le Read \u00f5iguse. Taask\u00e4ivitasin CertSvc ja\u2026 tulemus: Element not found.
\n Siin ma tunnen end kurvana, sest on kesk\u00f6\u00f6 kaks\u2026 ja CA ei t\u00f6\u00f6ta. L\u00fclitan v\u00e4lja CA Windows 2012R2 ja taastan VM CA Windows 2008R2 kindlasti. Tagastan serveri AD-sse (sest domeeni sisselogimisel tuleb v\u00e4lja suhete viga, serverilt<\/a> ja AD).
\n No ma arvan\u2026 n\u00fc\u00fcd l\u00e4heb k\u00f5ik h\u00e4sti, aga kahjuks\u2026 k\u00f5ik on ikka veel Certificate Templates \u2014 ma saan Element not found. J\u00e4tan selle hommikuni \u2014 sest hommik on \u00f5htust targem.
\n Hommikul googeldasin, lugedes erinevaid artikleid \u2014 otsustan juba olemasoleva CA uuesti installida serveris<\/a> lootuses lahendada probleem Element Not Found ja sertifikaatide v\u00e4ljastamine veebis.<\/p>\n

Protsess on \u00fcsna lihtne:<\/b>
\n1) Eemaldame CA rolli
\n2) Taask\u00e4ivitame
\n3) Ootame eemaldamisprotsessi l\u00f5puleviimist
\n4) Lisame CA rolli (m\u00e4\u00e4rame CA, CA Web Enrollment, NDES, Online Responder)
\n5) T\u00e4psustame, et mul on Enterprise CA ja mul on privaatne v\u00f5ti
\n6) Ootame installimise l\u00f5puleviimist ja taastame k\u00f5ik varukoopiatest, mille me alguses tegime.
\n7) Nagu tavaliselt, l\u00e4ks k\u00f5ik h\u00e4sti \u2014 ilma vigadeta ja teenus k\u00e4ivitus<\/p>\n

S\u00fcdame kloppimise saatel klikin Certificate Templates \u2013 ja\u2026 mulle ilmus nimekiri \u2013 see on juba v\u00e4ike v\u00f5it. Peab kontrollima sertifikaadi v\u00e4ljaandmise toimimist veebis. L\u00e4hen lingile: vm_ca\/certsvc<\/noindex> ja klikkin Request a Certificate ja edasi advanced certificate request\u2026 m\u00e4\u00e4ran .csr p\u00e4ringu ja saan valmis sertifikaadi. Vabastan\u2026 CA taastamine \u00f5nnestus.<\/p>\n

Kokkuv\u00f5tted:<\/b>
\n1) Tehke kindlasti varukoopia ja snapshot
\n2) Dokumenteerige oma tegevused \u2014 see aitab k\u00f5ik tagasi tuua v\u00f5i leidma vea kiiremini<\/p>\n

P.s. Mul on ees veel kord proovida CA migratsiooni Windows 2008R-st Windows 2012R2-le.
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u043e\u0431\u0440\u044b\u0439 \u0434\u0435\u043d\u044c \u0443\u0432\u0430\u0436\u0430\u043c\u044b\u0439 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u044c, \u042f \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0443 \u0412\u0430\u043c \u043e \u0441\u0432\u043e\u0435\u043c \u043a\u043e\u0448\u043c\u0430\u0440\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044f \u043f\u0435\u0440\u0435\u0436\u0438\u043b \u043c\u0438\u0433\u0440\u0438\u0440\u0443\u044f CA \u0441 Windows 2008R2 \u043d\u0430 Windows 2012 R2. \u0412 \u0438\u043d\u0435\u0442\u0435 \u043e\u0447\u0435\u043d\u044c \u043c\u043d\u043e\u0433\u043e \u0441\u0442\u0430\u0442\u044c\u0439 \u043f\u043e \u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u0432\u043e\u0434\u0443 \u0438 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0431\u044b\u0442\u044c. \u041a \u0441\u0432\u043e\u0435\u043c\u0443 \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e \u2014 \u044f \u043d\u0435 \u043e\u0441\u043e\u0431\u043e Windows Admin, \u044f \u0431\u043e\u043b\u044c\u0448\u0435 *nix \u0430\u0434\u043c\u0438\u043d, \u043d\u043e \u0431\u044b\u043b\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0437\u0430\u0434\u0430\u0447\u0430 \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31759","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Eba\u00f5nnestunud Certificate Authority(CA) migratsioon Windows 2008R-st Windows 2012 R2-le | ProHoster","description":"Tere p\u00e4evast, austatud lugeja, r\u00e4\u00e4gin teile oma \u00f5udusest, mille ma l\u00e4bi elasin, migreerides CA Windows 2008R2-st Windows 2012 R2-le. Internetis on selle kohta palju artikleid ja mingisuguseid probleeme ei tohiks olla.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/ne-udachnaya-migratsiya-certificate-authority-ca-s-windows-2008r-na-windows-2012-r2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0435 \u0443\u0434\u0430\u0447\u043d\u0430\u044f \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u044f Certificate Authority(CA) \u0441 Windows 2008R \u043d\u0430 Windows 2012 R2 | ProHoster","og:description":"\u0414\u043e\u0431\u0440\u044b\u0439 \u0434\u0435\u043d\u044c \u0443\u0432\u0430\u0436\u0430\u043c\u044b\u0439 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u044c, \u042f \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0443 \u0412\u0430\u043c \u043e \u0441\u0432\u043e\u0435\u043c \u043a\u043e\u0448\u043c\u0430\u0440\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044f \u043f\u0435\u0440\u0435\u0436\u0438\u043b \u043c\u0438\u0433\u0440\u0438\u0440\u0443\u044f CA \u0441 Windows 2008R2 \u043d\u0430 Windows 2012 R2. \u0412 \u0438\u043d\u0435\u0442\u0435 \u043e\u0447\u0435\u043d\u044c \u043c\u043d\u043e\u0433\u043e \u0441\u0442\u0430\u0442\u044c\u0439 \u043f\u043e \u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u0432\u043e\u0434\u0443 \u0438 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0431\u044b\u0442\u044c.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/ne-udachnaya-migratsiya-certificate-authority-ca-s-windows-2008r-na-windows-2012-r2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:42:53+00:00","article:modified_time":"2019-10-31T18:42:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31759","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 21:50:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:11:23","updated":"2026-02-09 21:50:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31759","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=31759"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31759\/revisions"}],"predecessor-version":[{"id":160244,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31759\/revisions\/160244"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=31759"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=31759"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=31759"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}