???? ID: 298138 - ????? ???????: 11 ??????? 2011 - ??????: 3.0

How to move a certification authority to another server

???? ?????? ???????????? ?????? ???????? KB ?? ???????? ????? ?? ??? ???? ????? ????
?? ???????? ?? ?????? ??? ?? ?? ???? ???? ???? ??.
?????? ??????This article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.
?????
This article applies to Windows 2000.Support for Windows 2000 ends on July 13, 2010.TheWindows 2000 End-of-Support Solution Center (http://support.microsoft.com/win2000) is a starting point for planning your migration strategy from Windows 2000. For more information see theMicrosoft Support Lifecycle Policy (http://support.microsoft.com/lifecycle/) .
?????
This article applies to Windows 2000.Support for Windows 2000 ends on July 13, 2010.TheWindows 2000 End-of-Support Solution Center (http://support.microsoft.com/win2000) is a starting point for planning your migration strategy from Windows 2000. For more information see theMicrosoft Support Lifecycle Policy (http://support.microsoft.com/lifecycle/) .
?????
This article applies to Windows 2000.Support for Windows 2000 ends on July 13, 2010.TheWindows 2000 End-of-Support Solution Center (http://support.microsoft.com/win2000) is a starting point for planning your migration strategy from Windows 2000. For more information see theMicrosoft Support Lifecycle Policy (http://support.microsoft.com/lifecycle/) .
?????
This article applies to Windows 2000.Support for Windows 2000 ends on July 13, 2010.TheWindows 2000 End-of-Support Solution Center (http://support.microsoft.com/win2000) is a starting point for planning your migration strategy from Windows 2000. ???? ??????? ?? ??? ?????Microsoft ?????? Lifecycle ???? (http://support.microsoft.com/lifecycle/) .

?? ????? ??

??? ?? ??????? ???? | ??? ?? ??????? ????

??????

?? ???? ????? ???? ?? ?? ???? ????? ????? ?? ?????????? ?????????? (CA) ?? ?? ???? ?? ??? ???? ?????

?????????? ?????????? (CAs), ????????? ????? ????????????????? (PKI) ?? ?? ????? ?? ???????? ??? ???? CAs ?? ???? ?? decades ??? ??? ?? ????? ????????? CA ?? ????? ???? ?? ?????? ???????? ???? ?? ??? ????? ???? ?? ??? ???????? ???? ??? ????

???
  • ???? ?? ??? ??? CA ?? ?? ????? ?? ?? Windows Server 2003 ??? ??? ???? ????? ?? ??? Windows 2000 ????? ?? ??? ??, ???? ???? CA ????? ?? Windows Server 2003 ?? ??? Windows 2000 ????? ?? ??? ?? ???????? ???? ?????? ??? ?? ?? ?? ???? ??? ??? ?? ????? ?? ???? ?? ?????
  • ????????? ???? ?? ?????? ????? ?? % SystemRoot % ?? ?? ?????? ?????? ?? ????? ???? ?? ????? ?? % SystemRoot % ?? ??? ???? ???

    ?? ?? CA ????? ??? ??????? ????? ?? ?? ????? ?? ????? ?? ??? ???? CA ??????? ?? ?? ????????? ???? ?????? ??? ?????? ?? ???, ??? ?? ????? D:\Winnt\System32\Certlog ??????? ??, ?? ?????? ????? ???????????? D:\Winnt\System32\Certlog ??????? ?? ???? C:\Winnt\System32\Certlog ??????? ?? ??? ????? ???????????? ???? ?? ???? ??? ????? ???????????? ???? ?? ??? ?? ??????? ????? ?? CA ??????? ?????? ?? ???? ????

    ??? ????? ???????????? ???? ?? ?????? ???? ???, ?? ????? ?? ?????? ????? ?? % SystemRoot % ?? ??? ????, ?? ???? ????? ?????? ????? ??????? ?? ???? ??:
    ??? ????? ??? ?? ???????????? ???? ?? ???? ????????? ??? ?? ???????????? ???? ???? ?? ????? ?????????? ??? ?????? ??? 0X8007010B (WIN32/HTTP:267)
    ????? ?????? ??????? ??? ?? ?? ?? ??? ?????????? ?????? vice versa ?? 64-??? ???????? ?????? ?? ?? 32-??? ???????? ?????? ?? ?? ???? ???? ?? ???? ??:
    ?? ?????????? ??? ???????? ???? ????? ???? ???
    ????????? ??? ?? ???????????? ????? ??? 0x8007010b (WIN32/HTTP:267) ?? ???????????? ?? ???? ?? ???? ???? ???? ?? ????

    ??????? ?????? ?????????? ?? 32-??? ??????? ?? 64-??? ??????? ?? ???? incompatibilities, ?? ???????????? ????? ???? ??? ??? ?? ???? ?? ???? ?? ??? Windows ????? 2003 CA ???? ?? ??? Windows 2000 ?? ??? ???????, ?? 64-??? ??????? ?? ??? ?? Windows Server 2003 ?? 32-??? ??????? ?? ???????? ?? ????? ?????, 64-??? ??????? ?? ??? ??? ?????? 32-??? ??????? ?? ?? ???? ?? ????????? ??????? ?? ???, Microsoft ?????? ??? ??? ???? ????? ?? ??? ????? ???? ?????? ????? ????::
    912309  (http://support.microsoft.com/kb/912309/ ) Windows Server 2003 ?????? ??? 1 ?? ??? Windows Server 2003 R2 ??? ???????? ???? ????
  • ??? x64-?????? ??????? ?? Windows Server 2003 R2 CD2 ?????? ???? 64-??? ????????? ?? Windows Server 2003 EM64T ??????????? ?? AMD64 ??????????? ?? ?????? ??? ?? ???
????? ?? ???? ????

??? ?? ???? ?? ?????????? ?????????? ????? ?? ??????? ???????????? ????

Windows Server 2003

???????????? ???, ????, ?? ????? ?? ????????? ?? ??????? ???? ?? ??? ????? ????? ??? ???? ???????, ??? ?? ????????? ?? ??? ??? ?? ??????? ???? ??? ?? ????? ???????? ??????? ?? ???? ???.. ?????, ????????? ???? ?? ?? ?? ????? ?? ??????????? ???? ???? ???.. ?????? ??????? ?? ???, ????????? ?? ??????? ???? ?? ???? ???? ??? ?? ???.. ???, ??? ??? ?????? ??????? ???? ?? ?? ?? ????????? ?? ???????????? ?? ???? ???.. ????????? ?? ??? ?? ???? ?? ???????????? ???? ?? ????? ?? ???? ??? ???? ??????? ?? ???, Microsoft ?????? ??? ??? ???? ????? ?? ??? ????? ???? ?????? ????? ????::
322756  (http://support.microsoft.com/kb/322756/ ) ??? ?? ???? ?? Windows ??? ????????? ?? ???????????? ???? ????
  1. ?????????? ?????????? ?????-?? ??? ?????????? ???????? ?????? ??? ???????? ???? ??? ?????? ???? ?????????? ?? ??? ????? ?????????? ???????? ???????? ?????? ?????????? ??? ???????? ???? ?? ?? ???????? ??? ?? ????? ???? ???? ?? ?? ???????? ?? ???? ??? ?? ???? ???? ?? ??? ??? CA ?????????? ???????? ???????? ?? ???????? ??? ?? ???????? ???? ?????

    ???:?????????? ???????? ?? ???? ??????????? CA. Stand-alone CAs ?? ???? ?????? ????? ?? ?????????? ???????? ?? ????? ???? ????? ?????, ?? ??? ?? ???? ??????-???? CA ???? ???? ?????
  2. CA ??????? ?? ???? ????? ?? ????? ???? ?? ??? ?????????? ?????????? ?????-?? ?? ?????? ??? ???? ?? ???, ????? ????? ?? ???? ????::
    1. ?????????? ?????????? ?????-?? ???, CA ??? ?? ????-????? ????, ????? ??????? ??????? ????-????? ????, ?? ???? ???CA ?? ????? ????????????? ?????????? ????? ??????? ??????? ?????
    2. ????? ????,next?? ????-????? ????, ?? ???? ??????? ????? ?? CA ??????????.
    3. ????? ????,??????? ?? ?????? ???? ?? ?????? ???? ??????? ???.
    4. ????? ????? ?? ??? ??? ?? ????? ??????? ?? ????? ????? ????????? ???? ?? ????? ??????? ?? ????? ?????? ?????? ?? ???? ????
    5. ????? ????,next. ??? ????? ????????? ??????? ????? ???? ??, ?? ?????????? ?????????? ????? ??????? ??? ????? ???
    6. ???? ????, ?? ???? ??? CA ???? ????? ????? ????? ?? ??? ???? ??????? ?? ?????? ?????
    7. ????? ????,next, ?? ???? ??? ????? ???????? ?? ???? ????? ????? ???????? ????????? ???? ????? ???? ?? ???? ??:
      • ???? ????? ?? CA ??????????
      • ??? ?? ???? ???? ??? ?? ?????? ?????
    8. ????? ????,??????.
  3. ?? CA ?? ??? ????????? ???????? ??????? ??? ???? ?? ???, ????? ????? ?? ???? ????::
    1. ????? ????,???????????? ????,???????????:regedit??????????????? ???, ?? ???? ???OK.
    2. ????? ????????? ??????? ?? ????? ????-????? ????::
      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CertSvc\Configuration
    3. ????? ????,???????.
    4. CA ????? ??????? ??? ?? ??? ???????? ????????? ????? ?? ?????? 2d ????
  4. ?????????? ???? ?? ?????? ????? ?? ????????

    ???:?? ??? ???????? ?? ?????? ?????????? ?? ??????? ??? ?????? ?? order ?? ??? ?? ???????? ????? ??? ??????? ????? CA ?? ??????? ?? ??? ?????? CA (??? 6 ??? ?? ???) ?? ?? ?? ??, ?????? CA ???????? ?? ??????
  5. ?????? ????? ?? ??? ?????, ?? ?????? ??? ?? ??? ??????? ?? ?????????? ?????
  6. ??? ????? ?? ?????????? ???? ??????? ????? ??? ???? ?? ???, ????? ????? ?? ???? ????:.

    ???:??? ????? ?????? ????? ?? ??? ??? ?? ?? ???????? ??? ???? ?????? ???
    1. ???????? ???? ??? ??? ????? ?????????? ?? ????????? ???????.
    2. ????? ????,Windows ?? ??? ??????/???????????? ????,?????????? ??????Windows ??? ???????, ?? ???? ???next.
    3. ?????CA ??????????? ????? ???, ??????? CA ?????? ????? ?????
    4. ????? ????,CA ?????????? ?? ????? ???? ?? ??????? ???? ?? ??? ????? ???????? ?? ????? ?????? ????-????? ????, ?? ???? ???next.
    5. ????? ????,???? ????, type the path of the .P12 file in the backup folder, type the password that you chose in step 2f, and then clickOK.
    6. ?????Public and Private Key Pairdialog box, verify thatUse existing keysis checked.
    7. ????? ????,next?? ?? ??? ????? ????..
    8. Accept the Certificate Database Settings default settings, clicknext?? ????-????? ????, ?? ???? ?????????to complete the Certificate Services installation.
  7. Stop the Certificate Services service.
  8. Locate the registry file that you saved in step 3, and then double-click it to import the registry settings. If the path that is shown in the registry export from the old CA differs from the new path, you must adjust your registry export accordingly. By default, the new path is C:\Windows in Windows Server 2003.
  9. Use the Certification Authority snap-in to restore the CA database. ??? ???? ?? ???, ????? ????? ?? ???? ????::
    1. ?????????? ?????????? ?????-?? ???, CA ??? ?? ????-????? ????, ????? ??????? ??????? ????-????? ????, ?? ???? ???Restore CA.

      The Certification Authority Restore Wizard starts.
    2. ????? ????,next?? ????-????? ????, ?? ???? ??????? ????? ?? CA ??????????.
    3. ????? ????,??????? ?? ?????? ???? ?? ?????? ???? ??????? ???.
    4. Type the backup folder location, and then clicknext.
    5. Verify the backup settings. TheIssued Log, ??Pending Requestssettings should be displayed.
    6. ????? ????,???????? ????-????? ????, ?? ???? ???????????? ???? ?? ???????? ???? ?? ??? CA ??????? ???????????? ???? ???? ?? ?? ?????

    ???:CA ????? ??????? ?? ??? ??????? ?????? ?????? ??? ???? ?? ??? ???????????? CA ????????? ?? ????? ????? ?????? ?? ??????? ?? ???? ??:
    ---------------------------
    Microsoft ?????????? ??????
    ---------------------------
    ?? ?????????? ??? ???????? ???? ????? ???? ???
    ????? ???? ???? ?????????? ?????? ?????????? ??? ?????? ??? 0X8007010B (WIN32/HTTP: 267)
    ??? ??????? ?????? ??????????? ??:
    C:\Ca_Backup\CA_NAME.p12
    C:\Ca_Backup\Database\certbkxp.dat
    C:\Ca_Backup\Database\edb#####.log
    C:\Ca_Backup\Database\CA_NAME.edb

    ???? C:\Ca_Backup ??????? ?? ???? ??? 2 ??? ????? CA ??? ?? ????? ???? ???
  10. ?????????? ?????????? ?????-?? ???, ???????? ??? ?? ????? ?? ??? 1 ??? ???? ?????? ??? ???? ??? ?????????? ???????? ???????? ?? ????????? ???? ?? ??? ?????????? ???????? ?? ????????

Windows 2000 ?????

???????????? ???, ????, ?? ????? ?? ????????? ?? ??????? ???? ?? ??? ????? ????? ??? ???? ???????, ??? ?? ????????? ?? ??? ??? ?? ??????? ???? ??? ?? ????? ???????? ??????? ?? ???? ???.. ?????, ????????? ???? ?? ?? ?? ????? ?? ??????????? ???? ???? ???.. ?????? ??????? ?? ???, ????????? ?? ??????? ???? ?? ???? ???? ??? ?? ???.. ???, ??? ??? ?????? ??????? ???? ?? ?? ?? ????????? ?? ???????????? ?? ???? ???.. ????????? ?? ??? ?? ???? ?? ???????????? ???? ?? ????? ?? ???? ??? ???? ??????? ?? ???, Microsoft ?????? ??? ??? ???? ????? ?? ??? ????? ???? ?????? ????? ????::
322756  (http://support.microsoft.com/kb/322756/ ) ??? ?? ???? ?? Windows ??? ????????? ?? ???????????? ???? ????
  1. ?????????? ?????????? ?????-?? ??? ?????????? ???????? ?????? ??? ???????? ???? ??? ?????? ???? ?????????? ?? ??? ????? ?????????? ???????? ???????? ?????? ?????????? ??? ???????? ???? ?? ?? ???????? ??? ?? ????? ???? ???? ?? ?? ???????? ?? ???? ??? ?? ???? ???? ?? ??? ??? CA ?????????? ???????? ???????? ?? ???????? ??? ?? ???????? ???? ?????

    ???:?????????? ???????? ?? ???? ??????????? CA. Stand-alone CAs ?? ???? ?????? ????? ?? ?????????? ???????? ?? ????? ???? ????? ?????, ?? ??? ?? ???? ??????-???? CA ???? ???? ?????
  2. CA ??????? ?? ???? ????? ?? ????? ???? ?? ??? ?????????? ?????????? ?????-?? ?? ?????? ??? ???? ?? ???, ????? ????? ?? ???? ????::
    1. ?????????? ?????????? ?????-?? ???, CA ??? ?? ????-????? ????, ????? ??????? ??????? ????-????? ????, ?? ???? ???CA ?? ????? ????????????? ?????????? ????? ??????? ??????? ?????
    2. ????? ????,next?? ????-????? ????, ?? ???? ??????? ????? ?? CA ??????????.
    3. ????? ????,??? ?? ?????? ???? ???? ???? ??? ?? ?????????? ?????? ?????? ????? ???
    4. ????? ????? ?? ??? ??? ?? ????? ??????? ?? ????? ????? ????????? ???? ?? ????? ??????? ?? ????? ?????? ?????? ?? ???? ????
    5. ????? ????,next. ??? ????? ????????? ??????? ????? ???? ??, ?? ?????????? ?????????? ????? ??????? ??? ????? ???
    6. ???? ????, ?? ???? ??? CA ???? ????? ????? ????? ?? ??? ???? ??????? ?? ?????? ?????
    7. ????? ????,next?? ???, ?? ???? ??? ????? ???????? ?? ???? ????? ????? ???????? ????????? ???? ????? ???? ?? ???? ??:
      • ???? ????? ?? CA ??????????
      • ??? ?? ???? ???? ??? ?? ?????? ?????
    8. ????? ????,??????.
  3. ?? CA ?? ??? ????????? ???????? ??????? ??? ???? ?? ???, ????? ????? ?? ???? ????::
    1. ????? ????,???????????? ????,???????????:regedit??????????????? ???, ?? ???? ???OK.
    2. ????? ????????? ??????? ?? ????? ????-????? ????::
      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CertSvc\Configuration
    3. ????? ????,configuration?? ????-????? ????, ?? ???? ???????????? ????? ?? ??????? ????????? ????????????????? ??..
    4. CA ????? ??????? ??? ?? ??? ???????? ????????? ????? ?? ?????? 2d ????
  4. ?????????? ???? ?? ?????? ????? ?? ????????

    ???:?? ??? ???????? ?? ?????? ?????????? ?? ??????? ??? ?????? ?? order ?? ??? ?? ???????? ????? ??? ??????? ????? CA ?? ??????? ?? ??? ?????? CA (??? 6 ??? ?? ???) ?? ?? ?? ??, ?????? CA ???????? ?? ??????
  5. ?????? ????? ?? ??? ?????, ?? ?????? ??? ?? ??? ??????? ?? ?????????? ?????
  6. ??? ????? ?? ?????????? ???? ??????? ????? ??? ???? ?? ???, ????? ????? ?? ???? ????:.

    ???:??? ????? ?????? ????? ?? ??? ??? ?? ?? ???????? ??? ???? ?????? ???
    1. ???????? ???? ??? ???-????? ????????? ??????/????????
    2. ????? ????,Windows ?? ??? ??????/???????????? ????,?????????? ??????Windows ??? ???????, ?? ???? ???next.
    3. ??????????????? ?????????? ?? ??????????? ????? ???, ??????? CA ?????? ????? ?????
    4. ????? ????,????? ???????? ????-????? ????, ?? ???? ???next.
    5. ?????????????? ?? ???? ????? ?????????? ????? ???, ????? ?????????? ???????? ?? ????? ?????? ????-????? ????, ?? ???? ??????? ????.
    6. ????? ??????? ??? .P12 ????? ?? ?? ???? ????, ??? 2f ??? ???? ?????? ???? ?? ??????? ???? ????, ?? ???? ??? ????? ????OK.
    7. ????? ????,next, ??? ??????? CA ????? ?????, ?? ???? ??? ????? ????next.
    8. ???? ??????? ????? ?? ???????? ???????? ??????? ????, ????? ????next?? ????-????? ????, ?? ???? ??????????????? ???? ?? ???? ???? ?? ??? ??????? ?????
  7. ?????????? ?????? ???? ?? ??? ?????
  8. ??? 3 ??? ????? ?? ????????? ????? ?? ?????? ?????, ?? ???? ??? ????????? ???????? ???? ???? ?? ??? ??? ??? ????? ?????
  9. CA ??????? ???????????? ???? ?? ??? ?????????? ?????????? ?????-?? ?? ?????? ??? ???? ?? ???, ????? ????? ?? ???? ????::
    1. ?????????? ?????????? ?????-?? ???, CA ??? ?? ????-????? ????, ????? ??????? ??????? ????-????? ????, ?? ???? ???CA ???????????? ????.

      ?????????? ?????????? ???????????? ??????? ??????? ?? ???? ???
    2. ????? ????,next?? ????-????? ????, ?? ???? ?????? ?? ?????? ???? ???? ???? ??? ?? ?????????? ?????? ?????? ??? ?????.
    3. ????? ??????? ????? ?????, ?? ???? ??? ????? ????next.
    4. ????? ???????? ?? ???? ????? ????? ???????? ????????? ???? ????? ???? ?? ???? ??:
      • Issued ???
      • ????? ??????
    5. ????? ????,???????? ????-????? ????, ?? ???? ???????????? ???? ?? ???????? ???? ?? ??? CA ??????? ???????????? ???? ???? ?? ?? ?????
  10. ?????????? ?????????? ?????-?? ???, ???????? ??? ?? ????? ?? ??? 1 ??? ???? ?????? ??? ???? ??? ?????????? ???????? ???????? ?? ????????? ???? ?? ??? ?????????? ???????? ?? ????????
????? ?? ???? ????

???? ???????

???? ??????? ?? ??? ???????? ?? ?????????? ???????? ?? ???? ??? Windows Server 2003 ?? Windows Server 2008 ?? ???, "?????? ?????????? ?????????? ?????? ???????? ?? ????????? ????????????" ????? ???? ?????? ????? ???? ??????? ????, ????? Microsoft ??????? ?????? ??? ???? ?? ????:
HTTP://www.Microsoft.com/downloads/details.aspx?FamilyID=c70bd7cd-9f03-484b-8c4b-279bc29a3413&displaylang=en (http://www.microsoft.com/downloads/details.aspx?FamilyID=c70bd7cd-9f03-484b-8c4b-279bc29a3413&displaylang=en)
????? ?? ???? ????
???? ???? ???? ??:
  • Microsoft Windows Server 2003, Enterprise x64 Edition
  • Microsoft Windows Server 2003, Standard x64 Edition
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Server
????? ?? ???? ????
??????: 
kbcertservices kbenv kbhowtomaster w2000certsrv kbmt KB298138 KbMthi
????? ?? ???? ????
???? ?????? ???????????? ?????? ????????
??????????: ?? ???? ?? ???? ??????? ?? ????? ?? Microsoft ????-?????? ?????????? ?????? ?????? ???? ??? ??. Microsoft ???? ??? ????-???????? ?? ????-???????? ????? ?????? ?? ???? ???????? ???? ?? ???? ????? ????? ??? ?? ??? ?????? ?? ???? ???? ???? ??? ????? ??. ???????, ????-???????? ???? ????? ???? ???? ???? ???. ?????, ????????, ?????-???? ?? ??????? ?? ???????? ?? ???? ???, ???? ?? ??? ?????? ???? ???? ??? ????? ??? ?? ???? ??. Microsoft ??????? ??? ???? ?? ?????? ?? ??????????, ????????? ?? ??? ?????? ?? ???? ????? ?? ???? ???????? ?? ??? ???? ????? ?? ??? ????????? ???? ??. Microsoft ????-?????? ?????????? ?? ????? ?????? ?? ?? ??? ??.
?????????? ?? ??????? ????????? ??????? ??:298138  (http://support.microsoft.com/kb/298138/en-us/ )
????? ?? ???? ????