Removing Certificate Authority

2

I'm trying to rename an old server ( 2008 R2 Standard) of ours that will be used for a SQL DEV(Used to be old prod), but the options to change computer name/domain is greyed out. I found that it's because CA is installed on this server, but not being used. The Active Directory Certificate services aren't able to start, and the options to remove the role from Server Manager is greyed out.

Any ideas how to go about removing the CA role/service properly so i can re-name this server?

When i try to start the AD certificate service it generates an error in the event viewer; Event ID 100 & 42. Description says:evtID42: Could not build a certificate chain for CA certificate 0 for domain-hostname-ca. A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider. 0x800b0109 (-2146762487). Evt ID 100:Active Directory Certificate Services did not start: Could not load or verify the current CA certificate. domain-hostname-ca. A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider. 0x800b0109 (-2146762487).

windows-server-2008
certificate-authority
uninstall
asked on Server Fault Jan 23, 2015 by samalkobi

1 Answer

0

Neeeeeevermind....I haven't added/removed server roles in a long while; Apparently, you have to UNCHECK the roles you want to remove...go figure. MY bad guys, thanks for the input! –

answered on Server Fault Feb 6, 2015 by samalkobi

User contributions licensed under CC BY-SA 3.0