{"id":31759,"date":"2019-10-31T21:42:53","date_gmt":"2019-10-31T18:42:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/ne-udachnaya-migratsiya-certificate-authority-ca-s-windows-2008r-na-windows-2012-r2\/"},"modified":"2019-10-31T21:42:53","modified_gmt":"2019-10-31T18:42:53","slug":"ne-udachnaya-migratsiya-certificate-authority-ca-s-windows-2008r-na-windows-2012-r2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/ne-udachnaya-migratsiya-certificate-authority-ca-s-windows-2008r-na-windows-2012-r2","title":{"rendered":"Migrarea nereu\u0219it\u0103 a autorit\u0103\u021bii de certificare (CA) de la Windows 2008R la Windows 2012 R2","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Bun\u0103 ziua, stimate cititor,
\n Voi povesti despre co\u0219marul meu pe care l-am tr\u0103it migr\u00e2nd CA de la Windows 2008R2 la Windows 2012 R2. Pe internet exist\u0103 foarte multe articole pe aceast\u0103 tem\u0103 \u0219i nu ar fi trebuit s\u0103 fie probleme. <\/p>\n

Din p\u0103cate, nu sunt un administrator de Windows foarte experimentat, eu sunt mai mult administrator de *nix, dar am primit sarcina de a migra CA \u2013 trebuie s\u0103 o fac. <\/p>\n

Sub aceast\u0103 linie, voi explica cum am parcurs acest proces \u0219i am ob\u021binut un final nu tocmai fericit, \u00een cele din urm\u0103.
\n<\/a><\/noindex>
\nS\u0103 \u00eencepem...
\nDatele ini\u021biale:<\/b>
\nSursa<\/b> \u2014 Windows 2008 R2 cu Root CA
\nDestina\u021bia<\/b> \u2014 Windows 2012R2<\/p>\n

Serverul Windows 2012R2 era deja instalat \u0219i configurat minimal. <\/p>\n

Ini\u021bial, planul de ac\u021biune a fost urm\u0103torul (ap\u0103sat):<\/b>
\n1) Facem Backup CA+Cheia privat\u0103 \u0219i o copiem pe o partajare comun\u0103 pentru ambele computere
\n2) Scoatem destina\u021bia din domeniu \u0219i schimb\u0103m IP-ul
\n3) Facem un snapshot al serverului
\n4) Schimb\u0103m IP-ul pe surs\u0103
\n5) Ne conect\u0103m la noul server Windows 2012R2 ca administrator \u2013 introducem serverul \u00een domeniu cu acela\u0219i nume \u0219i aloc\u0103m vechiul IP
\n6) Instal\u0103m rolul Active Directory Certificate Service (CA, CA Web Enrollment, NDES, Online Responder)
\n7) Specific\u0103m c\u0103 este un CA de tip Enterprise
\n8) Restaur\u0103m CA+Cheia privat\u0103 din backup
\n9) Final fericit<\/p>\n

S\u0103 recunoa\u0219tem, nu este nimic complicat. \u0218i am \u00eenceput implementarea. De fapt, nu au fost probleme \u0219i totul a mers ca pe roate... Serviciul a pornit, \u0219abloanele de certificate au ap\u0103rut \u0219i certificatele propriu-zise au ap\u0103rut. \u00cen general, totul este OK. A\u0219a c\u0103 am mers s\u0103 dorm. Diminea\u021ba, nu au fost pl\u00e2ngeri privind func\u021bionarea CA-ului, a\u0219a c\u0103 am considerat c\u0103 totul func\u021bioneaz\u0103 \u0219i am trecut la alte sarcini. \u00cen procesul de rezolvare a acestora, am avut nevoie de un certificat. Am creat un .csr \u0219i am mers la link-ul vm_ca\/certsvc<\/noindex>, pentru a semna \u0219i primi certificatul \u0219i exact \u00een acest moment a ap\u0103rut o eroare. Din p\u0103cate, n-am f\u0103cut o captur\u0103 de ecran, dar acolo spunea despre un conflict \u00een informa\u021biile utilizatorului \u0219i alte erori. M-am g\u00e2ndit \u201eEi bine, am poposit aici\u201d. Am \u00eenceput s\u0103 caut pe Google, dar din p\u0103cate nu am g\u0103sit nimic clar.<\/p>\n

Seara, am decis s\u0103 elimin CA Windows 2012R2 \u0219i s\u0103 reinstalez totul, \u0219i atunci am f\u0103cut o gre\u0219eal\u0103, \u00een loc de Enterprise CA, am ales variant\u0103 Standalone CA (de gre\u0219elile mele am aflat mai t\u00e2rziu). Am repetat toate opera\u021biile... totul a mers f\u0103r\u0103 erori - dar la alegerea folderului Certificate Templates - primesc Element not found, de\u0219i dac\u0103 aleg Manage \u2013 \u0219abloanele sunt la locul lor.
\n M-am g\u00e2ndit c\u0103 nu am suficiente privilegii pentru CN=Certificate Templates, a\u0219a c\u0103, cu ajutorul ADSI Edit, am dat Read pentru vm_ca$. Am repornit CertSvc \u0219i... rezultatul: Element not found.
\n M-am sim\u021bit melancolic pentru c\u0103 era ora 2 noaptea... \u0219i CA nu func\u021biona. Oprind CA Windows 2012R2 \u0219i restabilesc VM CA Windows 2008R2 din snapshot. Revenind serverul \u00een AD (deoarece la \u00eencercarea de conectare cu contul de domeniu apare o eroare de rela\u021bie \u00eentre serverul<\/a> \u0219i AD).
\n Ei bine, m\u0103 g\u00e2ndesc... acum totul ar trebui s\u0103 fie OK, dar din p\u0103cate... tot a\u0219a Certificate Templates \u2014 primesc Element not found. Voi l\u0103sa totul p\u00e2n\u0103 diminea\u021ba \u2014 deoarece diminea\u021ba e mai \u00een\u021beleapt\u0103 dec\u00e2t seara.
\n Diminea\u021ba am c\u0103utat pe Google, citind diferite articole \u2014 m\u0103 decid s\u0103 reinstalez CA pe vechiul server<\/a> \u00een speran\u021ba de a rezolva problema Element Not Found \u0219i emiterea certificatelor prin Web.<\/p>\n

Procesul este destul de simplu:<\/b>
\n1) Elimin\u0103m rolul CA
\n2) Reboot\u0103m
\n3) A\u0219tept\u0103m finalizarea procesului de eliminare
\n4) Ad\u0103ug\u0103m rolul CA (specific\u0103m CA, CA Web Enrollment, NDES, Online Responder)
\n5) Indic\u0103 c\u0103 am CA de tip Enterprise \u0219i am o cheie privat\u0103
\n6) A\u0219tept\u0103m finalizarea instal\u0103rii \u0219i restaur\u0103m totul din backup-ul pe care l-am f\u0103cut la \u00eenceput.
\n7) A\u0219a cum era de a\u0219teptat, totul decurge bine \u2014 f\u0103r\u0103 erori \u0219i serviciul a \u00eenceput<\/p>\n

Cu inima tremur\u00e2nd, fac clic pe Certificate Templates \u2014 \u0219i... mi-a ap\u0103rut lista \u2014 acesta este deja un mic succes. R\u0103m\u00e2ne s\u0103 verific func\u021bionarea emiterii certificatului prin Web. Merg pe link: vm_ca\/certsvc<\/noindex> \u0219i clic pe Request a Certificate \u0219i apoi advanced certificate request\u2026 indic .csr cererea \u0219i primesc certificatul finalizat. Respir u\u0219urat\u2026 Am reu\u0219it s\u0103 restabilesc CA.<\/p>\n

Concluzii:<\/b>
\n1) Asigura\u021bi-v\u0103 c\u0103 face\u021bi un backup \u0219i un snapshot
\n2) Documenta\u021bi ac\u021biunile dvs. \u2014 asta va ajuta s\u0103 readuce\u021bi totul \u00eenapoi sau s\u0103 g\u0103si\u021bi gre\u0219eala mai repede<\/p>\n

P.s. Trebuie s\u0103 \u00eencerc din nou migrarea CA de la Windows 2008R la Windows 2012R2.
\n
Sursa: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u043e\u0431\u0440\u044b\u0439 \u0434\u0435\u043d\u044c \u0443\u0432\u0430\u0436\u0430\u043c\u044b\u0439 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u044c, \u042f \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0443 \u0412\u0430\u043c \u043e \u0441\u0432\u043e\u0435\u043c \u043a\u043e\u0448\u043c\u0430\u0440\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044f \u043f\u0435\u0440\u0435\u0436\u0438\u043b \u043c\u0438\u0433\u0440\u0438\u0440\u0443\u044f CA \u0441 Windows 2008R2 \u043d\u0430 Windows 2012 R2. \u0412 \u0438\u043d\u0435\u0442\u0435 \u043e\u0447\u0435\u043d\u044c \u043c\u043d\u043e\u0433\u043e \u0441\u0442\u0430\u0442\u044c\u0439 \u043f\u043e \u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u0432\u043e\u0434\u0443 \u0438 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0431\u044b\u0442\u044c. \u041a \u0441\u0432\u043e\u0435\u043c\u0443 \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e \u2014 \u044f \u043d\u0435 \u043e\u0441\u043e\u0431\u043e Windows Admin, \u044f \u0431\u043e\u043b\u044c\u0448\u0435 *nix \u0430\u0434\u043c\u0438\u043d, \u043d\u043e \u0431\u044b\u043b\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0437\u0430\u0434\u0430\u0447\u0430 \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31759","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Migrarea neinspirat\u0103 a Certificate Authority (CA) de la Windows 2008R la Windows 2012 R2 | ProHoster","description":"Bun\u0103 ziua, estimat cititor, Voi povesti despre co\u0219marul pe care l-am tr\u0103it migr\u00e2nd CA de la Windows 2008R2 la Windows 2012 R2. Pe internet sunt multe articole despre acest subiect \u0219i nu ar fi trebuit s\u0103 fie probleme.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/ne-udachnaya-migratsiya-certificate-authority-ca-s-windows-2008r-na-windows-2012-r2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0435 \u0443\u0434\u0430\u0447\u043d\u0430\u044f \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u044f Certificate Authority(CA) \u0441 Windows 2008R \u043d\u0430 Windows 2012 R2 | ProHoster","og:description":"\u0414\u043e\u0431\u0440\u044b\u0439 \u0434\u0435\u043d\u044c \u0443\u0432\u0430\u0436\u0430\u043c\u044b\u0439 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u044c, \u042f \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0443 \u0412\u0430\u043c \u043e \u0441\u0432\u043e\u0435\u043c \u043a\u043e\u0448\u043c\u0430\u0440\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044f \u043f\u0435\u0440\u0435\u0436\u0438\u043b \u043c\u0438\u0433\u0440\u0438\u0440\u0443\u044f CA \u0441 Windows 2008R2 \u043d\u0430 Windows 2012 R2. \u0412 \u0438\u043d\u0435\u0442\u0435 \u043e\u0447\u0435\u043d\u044c \u043c\u043d\u043e\u0433\u043e \u0441\u0442\u0430\u0442\u044c\u0439 \u043f\u043e \u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u0432\u043e\u0434\u0443 \u0438 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0431\u044b\u0442\u044c.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/ne-udachnaya-migratsiya-certificate-authority-ca-s-windows-2008r-na-windows-2012-r2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:42:53+00:00","article:modified_time":"2019-10-31T18:42:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31759","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 21:50:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:11:23","updated":"2026-02-09 21:50:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/31759","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=31759"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/31759\/revisions"}],"predecessor-version":[{"id":160244,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/31759\/revisions\/160244"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=31759"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=31759"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=31759"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}