How to migrate current Microsoft CA Certificates to the Crypto Server Security Server

  • Article ID: 109523
  • Updated: 27 Jun 2009


Product
SafeGuard CryptoServer all

Client OS

None

Server OS

None

Question

How to migrate current Microsoft CA Certificates to the Crypto Server Security Server

Answer

Proceed as follows:

- Use the CSP Key management Tool to export the key from the Microsoft CA
Select the Provider: Microsoft Ctyptographic Provider
Select the Signature key (Key ID ==2) in the Keylist
Press the Backup Key - Button an give it a password
The key is now saved in an encrypted file

- Now you can import this file to the CryptoServer using the CSP Key management Tool:
Select the Provider: Utimaco CryptoServer CSP
Enter the name of the Key Container (Same as the one at Microsoft Provider)
Click "Create Container"
Click "Restore Key" and choose the Keyfile
Enter the password
The key is now listed in the Keylist.

Now the MicrosoftCA has to be reinstalled. (Microsoft prevents changing the CSP in a running CA)
When installing the new CA choose 'use existing key' and select the signature key in the Cryptographic Service Provider.

 
If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent

Comments