1. Create a folder on the local drive to which the CA will be backed up (that is,
C:\CABackup).
2. Open the Certification Authority management console if it is not already open.
3. Right-click the CA server instance, select All Tasks, and then select Back Up
CA. This will launch the Certification Authority Backup Wizard.
4. Click Next on the Welcome screen.
5. Check the Private Key and CA Certificate, and, Certificate Database and
Certificate Database Log checkbox (Figure 12-17). Click Browse select the folder
you created in step 1, and then click Next.
6. Enter and confirm a password that will be used to secure the private key and
CA certificate file, and then click Next (Figure 12-18).
7. Click Finish to complete the backup process.
Figure 12-17. Selecting items to back up
423 Chapter 12: Enterprise Public Key Infrastructure
To restore your CA from this backup, simply run the Certification Authority Restore
Wizard and reverse this process.
Hands-On Exercise: Renewing Your CA Certificate
During the installation of our CA, you created your CA certificate by supplying a password
for your private key and you also specified how long this certificate will be valid.
Eventually, you will need to renew this CA certificate or it will expire and will no longer
be valid. You might also want to renew your CA certificate if your signing key has been
compromised or you need a new CA certificate to create a new CRL.
Pages:
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454