I want to remove the Certificate Authority role on my WS2003/Exchange 2007 server. What I would like to know is if I follow the instructions in MS article 889250 at http://support.microsoft.com/default.aspx/kb/889250?p=1 , will I be able to re-establish this machine as CA if I want to in the future. As I have just set this machine up as a CA/Standalone-root, I have no pending, revoked or issued certificate requests. The machine is not operational yet. We are in the process of transitioning to ES2007 from ES2003. I am a novice, so please be verbose in your answer. Thanks very much.

this is the wrong forum for your question. it is highly unadvised to mix the CA role with other workloads like Exchange (or AD). a CA doesn't take a ton of resources, so you can easily build one on a VM that does just that one thing and be much more flexible going forward.So, remove the CA role and then make sure all the web functionality of Exchange is still working, then install the CA role somewhere else.

Thank you, Andy.

Hi,I agree with Andy.If you are using self-signed certificate for Exchange Server, then I recommend you to install another CA and then issue new certificate for Exchange Server and then dismiss the old certificate which issued by the old CA.After that, you can uninstall the CA role.Regards,Xiu

Hi Linda I came across same situation where My domain controller 2003 server was my Root CA and I migrated DC to server 2008 and decommissioned CA in server 2003, I am going to install CA in server 2008 Data centre edition. Yes I did followed the link http://support.microsoft.com/default.aspx/kb/889250?p=1 to decomission Root CA in server 2003. it was sweet It is advisable to install CA services in other than mail /DC servers, you can follow the link to install CA in server 2008: http://technet.microsoft.com/en-us/library/cc772393(WS.10).aspx Good luckWith best regards siddu sajjan : Disclaimer: This posting is provided "as is" with no warranties, and confers no rights.