New AD CS doc: Migrating a Certification Authority from a CSP to a KSP


Just published: Migrating a Certification Authority Key from a Cryptographic Service Provider (CSP) to a Key Storage Provider (KSP) – and optionally, migrating from SHA-1 to SHA-2.

If you have a CA that you installed and configured a while ago and you're now able to implement these stronger security options, use this how-to and verification steps.

Comments (2)

  1. Chris B says:

    Does the article also apply to Windows Server 2008 R2 as well. It seems like it does but the article only stats Server 2012 and Server 2012 R2.