{"id":31759,"date":"2019-10-31T21:42:53","date_gmt":"2019-10-31T18:42:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/ne-udachnaya-migratsiya-certificate-authority-ca-s-windows-2008r-na-windows-2012-r2\/"},"modified":"2019-10-31T21:42:53","modified_gmt":"2019-10-31T18:42:53","slug":"ne-udachnaya-migratsiya-certificate-authority-ca-s-windows-2008r-na-windows-2012-r2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/ne-udachnaya-migratsiya-certificate-authority-ca-s-windows-2008r-na-windows-2012-r2","title":{"rendered":"Eba\u00f5nnestunud Certificate Authority (CA) migreerimine Windows 2008R-st Windows 2012 R2-le","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Tere, austatud lugeja,
\n R\u00e4\u00e4gin teile \u00f5udusunen\u00e4ost, mille ma kogesin CA migreerimisel Windows 2008R2-lt Windows 2012 R2-le. Internetis on selle kohta palju artikleid ja probleeme ei tohiks olla. <\/p>\n

Kahjuks pole ma Windowsi administraator, olen rohkem *nix administraator, kuid mulle pandi \u00fclesanne migratsioon - see tuleb teha. <\/p>\n

Allpool jagan, kuidas ma selle protsessi l\u00e4bisin ja ei saanud l\u00f5puks just \u00f5nnelikku l\u00f5ppu.
\n<\/a><\/noindex>
\nNii, hakakem pihta\u2026
\nAlgandmed:<\/b>
\nAllikas<\/b> \u2014 Windows 2008 R2 koos Root CA-ga
\nSiht<\/b> \u2014 Windows 2012R2<\/p>\n

Windows 2012R2 server oli juba installitud ja minimaalsetelt seadistatud. <\/p>\n

Algne tegevuskava oli j\u00e4rgmine (l\u00fchendatud tegevused):<\/b>
\n1) Teeme CA+Private Key varukoopia ja kopeerime selle \u00fchisfailiserverisse, et m\u00f5lemad arvutid saaksid sellele juurde p\u00e4\u00e4seda.
\n2) Eemaldame sihtdomeenist ja muudame IP-aadressi.
\n3) Teeme serverist snapshoti.
\n4) Muudame allika IP-aadressi.
\n5) Logime sisse uuele Windows 2012R2 serverile administraatorina - viime selle domeeni sama nimega ja m\u00e4\u00e4rame vana IP.
\n6) Installime Active Directory Certificate Service (CA, CA Web Enrollment, NDES, Online Responder) rolli.
\n7) M\u00e4\u00e4rame, et see on Enterprise CA.
\n8) Taastame CA+Private Key varukoopiast.
\n9) \u00d5nnelik l\u00f5pp.<\/p>\n

Noh, n\u00f5ustuge, et siin pole midagi keerulist. Alustasin teostamist. Tegelikult ei olnud probleeme ja k\u00f5ik sujus nagu \u00f5litatult\u2026 Teenus k\u00e4ivitus, sertifikaadi mallid ilmusid ja need ise sertifikaadid ilmusid. \u00dches\u00f5naga, k\u00f5ik oli OK. Seet\u00f5ttu l\u00e4ksin magama. Hommikul ei olnud CA aktiivsuse kohta mingeid kaebusi ja arvasin, et k\u00f5ik t\u00f6\u00f6tab, ning asusin teistele \u00fclesannetele. Protsessi k\u00e4igus vajas ma sertifikaati. Loodud .csr ja l\u00e4ksin lingile<\/noindex>vm_ca\/certsvc<\/p>\n

, et allkirjastada ja saada sertifikaati, kuid sel etapil tekkis viga. Kahjuks ei teinud ma ekraanipilti, kuid seal r\u00e4\u00e4kisid mismatch user information ja veel m\u00f5ned vead. Noh, n\u00fc\u00fcd olime h\u00e4das - m\u00f5tlesin ma. Alustasin googeldamist, kuid kahjuks ei leidnud midagi arusaadavat.
\n \u00d5htul otsustasime eemaldada CA Windows 2012R2 ja paigaldada k\u00f5ik uuesti ning seal tegin vea, valides Enterprise CA asemel Standalone CA (oma vea sain teada hiljem). Tegin k\u00f5ik toimingud uuesti\u2026 k\u00f5ik l\u00e4ks ilma vigadeta - kuid valides kausta Certificate Templates - sain Element not found, kuigi kui valisin Manage - olid mallid olemas.
\n M\u00f5tlesin, etCN=Certificate Templates jaoks on \u00f5igusi puudu, mist\u00f5ttu andsin ADSI Editiga vm_ca$-le lugemis\u00f5iguse. Taask\u00e4ivitades CertSvc ja\u2026 tulemus: Element not found. serveriga<\/a> Siis hakkas mul kiiresti kurvaks, sest kell oli kaks \u00f6\u00f6sel\u2026 ja CA ei t\u00f6\u00f6ta. L\u00fclitan v\u00e4lja CA Windows 2012R2 ja taastan VM CA Windows 2008R2 snapshotist. Tagastan serveri AD-sse (sest domeeni kasutajaga sisselogimisel ilmneb valed seosed
\n ja AD).
\n M\u00f5tlesin\u2026 n\u00fc\u00fcd peaks k\u00f5ik olema OK, aga kahjuks\u2026 ikka Certificate Templates - sain Element not found. J\u00e4tan hetke hommikuni - hommik on \u00f5htust targem. serveril<\/a> Hommikul googeldasin, lugesin igasuguseid artikleid - otsustasin paigaldada CA uuesti vanale<\/p>\n

lootuses lahendada probleem Element Not Found ja sertifikaatide v\u00e4ljastamisega veebis.<\/b>
\nProtsess on \u00fcsna lihtne:
\n1) Eemaldame CA rolli.
\n2) Restartime.
\n3) Ootame eemaldamisprotsessi l\u00f5ppu.
\n4) Lisame CA rolli (n\u00e4itame CA, CA Web Enrollment, NDES, Online Responder).
\n5) M\u00e4\u00e4rame, et mul on Enterprise CA ja mul on privaatne v\u00f5ti.
\n6) Ootame installimise l\u00f5ppu ja taastame k\u00f5ik varukoopiast, mille me alguses tegime.<\/p>\n

7) Nagu tavaliselt, k\u00f5ik sujub suurep\u00e4raselt - ilma vigadeta ja teenus k\u00e4ivitus. Protsessi k\u00e4igus vajas ma sertifikaati. Loodud .csr ja l\u00e4ksin lingile<\/noindex> S\u00fcdamel\u00f6\u00f6giga kl\u00f5psan Certificate Templates - ja\u2026 sain nimekirja - see on juba v\u00e4ike v\u00f5it. Peab kontrollima sertifikaadi v\u00e4ljastamise t\u00f6\u00f6d veebis. L\u00e4hen lingile:<\/p>\n

J\u00e4reldused:<\/b>
\nja kl\u00f5psan Request a Certificate ja edasi advanced certificate request\u2026 sisestan .csr taotuse ja saan valmis sertifikaadi. Ohkan kergendatult\u2026 CA taastamine \u00f5nnestus.
\n1) Tehke kindlasti varukoopia ja snapshot.<\/p>\n

2) Dokumenteerige oma toimingud - see aitab k\u00f5ik tagasi tuua v\u00f5i viga kiiremini leida.
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u043e\u0431\u0440\u044b\u0439 \u0434\u0435\u043d\u044c \u0443\u0432\u0430\u0436\u0430\u043c\u044b\u0439 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u044c, \u042f \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0443 \u0412\u0430\u043c \u043e \u0441\u0432\u043e\u0435\u043c \u043a\u043e\u0448\u043c\u0430\u0440\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044f \u043f\u0435\u0440\u0435\u0436\u0438\u043b \u043c\u0438\u0433\u0440\u0438\u0440\u0443\u044f CA \u0441 Windows 2008R2 \u043d\u0430 Windows 2012 R2. \u0412 \u0438\u043d\u0435\u0442\u0435 \u043e\u0447\u0435\u043d\u044c \u043c\u043d\u043e\u0433\u043e \u0441\u0442\u0430\u0442\u044c\u0439 \u043f\u043e \u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u0432\u043e\u0434\u0443 \u0438 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0431\u044b\u0442\u044c. \u041a \u0441\u0432\u043e\u0435\u043c\u0443 \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e \u2014 \u044f \u043d\u0435 \u043e\u0441\u043e\u0431\u043e Windows Admin, \u044f \u0431\u043e\u043b\u044c\u0448\u0435 *nix \u0430\u0434\u043c\u0438\u043d, \u043d\u043e \u0431\u044b\u043b\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0437\u0430\u0434\u0430\u0447\u0430 \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31759","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Eba\u00f5nnestunud Certificate Authority (CA) migratsioon Windows 2008R-lt Windows 2012 R2-le | ProHoster","description":"P.s. Mul on j\u00e4lle ees CA migratsiooni katse Windows 2008R-lt Windows 2012R2-le.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/ne-udachnaya-migratsiya-certificate-authority-ca-s-windows-2008r-na-windows-2012-r2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0435 \u0443\u0434\u0430\u0447\u043d\u0430\u044f \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u044f Certificate Authority(CA) \u0441 Windows 2008R \u043d\u0430 Windows 2012 R2 | ProHoster","og:description":"\u0414\u043e\u0431\u0440\u044b\u0439 \u0434\u0435\u043d\u044c \u0443\u0432\u0430\u0436\u0430\u043c\u044b\u0439 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u044c, \u042f \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0443 \u0412\u0430\u043c \u043e \u0441\u0432\u043e\u0435\u043c \u043a\u043e\u0448\u043c\u0430\u0440\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044f \u043f\u0435\u0440\u0435\u0436\u0438\u043b \u043c\u0438\u0433\u0440\u0438\u0440\u0443\u044f CA \u0441 Windows 2008R2 \u043d\u0430 Windows 2012 R2. \u0412 \u0438\u043d\u0435\u0442\u0435 \u043e\u0447\u0435\u043d\u044c \u043c\u043d\u043e\u0433\u043e \u0441\u0442\u0430\u0442\u044c\u0439 \u043f\u043e \u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u0432\u043e\u0434\u0443 \u0438 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0431\u044b\u0442\u044c. \u041a \u0441\u0432\u043e\u0435\u043c\u0443 \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e \u2014 \u044f \u043d\u0435 \u043e\u0441\u043e\u0431\u043e Windows Admin, \u044f \u0431\u043e\u043b\u044c\u0448\u0435 *nix \u0430\u0434\u043c\u0438\u043d, \u043d\u043e \u0431\u044b\u043b\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0437\u0430\u0434\u0430\u0447\u0430 \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u0438","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/ne-udachnaya-migratsiya-certificate-authority-ca-s-windows-2008r-na-windows-2012-r2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:42:53+00:00","article:modified_time":"2019-10-31T18:42:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31759","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 21:50:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:11:23","updated":"2026-02-09 21:50:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31759","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=31759"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31759\/revisions"}],"predecessor-version":[{"id":160244,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31759\/revisions\/160244"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=31759"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=31759"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=31759"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}