[louisvillecat]

I installed CA to create a SSL for IIS. If I remove Certification Authority will that nullify my SSL certificate already created? Will that take down https?

[murtuza_13]

It would obviously take down your https. You could still make it work till ur certificate expires by adding your Root CA ceritificate in the machine's local Certificate store. That way ur certification path would be valid and the certificate would work till the expiry date.

[louisvillecat]

where is the local certificate store located?

[murtuza_13]

You can use the certificates mmc and access the local machine's certificate store. In your SSL certificate's properties, you can use the certification path to trace back to the Root Certificate belonging to the root CA. You can then use the option to save it to file and create a .cer file. You can import this certificate to your Trust Root Authorities. Once this is done your SSL certificate's validity wouldnt be checked and it will work till it expires.

[Dumber]

why do you want to remove the CA????
I don't see the logic for such action.

[abhi_admin]

Originally Posted by louisvillecat

I installed CA to create a SSL for IIS. If I remove Certification Authority will that nullify my SSL certificate already created? Will that take down https?

It will nullify your ssl once you remove the CA. U cant use https then

[louisvillecat]

Originally Posted by Dumber

why do you want to remove the CA????
I don't see the logic for such action.

I want to migrate AD to another server.

[guyt]

Originally Posted by abhi_admin

It will nullify your ssl once you remove the CA. U cant use https then

No, it will not. The only implication is that the CRL (Certificate Revokation List) paths will not be available, and some SSL clients will complain about it.
When a client establishes an SSL session, it does not contact the CA that issued the cert. Just google for "offline root CA" - this is actually a common practice for securing CA infrastructure.

[kapilsharma11]

Your work will not be effected by this except users might get few warnings Pop-Ups while accessing the site. Simply need to OK that.

The only problem you will face during renewal of this certificate but as you have already mentioned that you are removing CA due to migration so it indicates that you will get a new CA once you complete the migration. So you can get a new certificate from the new CA once that will come into production.