1.
Windows ADCS
Migration and
Modernization
Mark B. Cooper, President & Founder
Shawn Rabourn, CTO

2.
Agenda
• Windows Server 2012 R2 End of Support: Frequently Asked Questions
• Migration Preparation Discussion
• Top 10 Migration Issues
• Additional Q&A

3.
Windows Server 2012 End of Support:
Frequently Asked Questions

4.
WHEN IS THE W2012R2 EOS DEADLINE?
October 10, 2023
Oct. 10 2023

5.
The EOS is a year away,
can’t I just WAIT?

6.
that will be available leading up to
Oct. 2023?
Are there enough experts in the field

7.
What about Windows Server 2008,
2016 and 2019?

8.
• Do you thoroughly know the state and components in your PKI?
• Is the PKI worth keeping and migrating?
• Has your business use cases changed since the PKI was deployed?
• Have you tested your migration plan?
• What is your backout plan?
What can I do to prepare for my migration?
Things to check to assess your readiness.

9.
What are the 10 most common
“gotchas” my team might miss?

10.
Migrating AD Integrated CAs with
LDAP based AIA/CDP locations -
ACL Changes

11.
Large CA Databases - Increases
migration time

12.
No recent CA Backup -
Considerably increases backup
time. Check for *.log files

13.
Broken/Failing CAs - If the CA is in
poor shape, the migration will likely
not be successful

14.
Hardware Security Modules -
Migrating CAs, OCSP, NDES with
NDES integration with break key
and certificate binding.
Requires manual "reconnection"

15.
Missing Keys - If you CA has been
previously renewed with a new key,
make sure ALL CA keys are backed
up and moved.

16.
Expiring CRLs - Make sure your
CRLs will be valid for the expected
period of migration

17.
Backups and Templates - Ensure
your CA doesn't continue to issue
certificates after it is backed up, and
service is still running prior to
migration

18.
CDP Publishing ACLs - Ensure
network based CAs can access and
update CRL locations after
migration

19.
Handling LDAP based variables
(%2) - Migrating CA to a new host
name will affect how CDP locations
are parsed by the CA

20.
Questions?
1 . A sk f u r t h er q u est i o n s
2 . G et an assessm en t o n yo u r
P K I en vi r o n m en t
3 . G et so l u t i o n s
Reach out today for an
assessment
Schedule today
On e o f o u r e x p e r t s w i l l h e l p
c r a f t y o u r P K I s t r a t e g y
For details contact:
Carolyn Ballo, Client Relationship Manager
carolyn@pkisolutions.com