I'm setting up a new Windows 2008 R2 server to take over from a older Windows 2003 box in a small windows domain. I discovered that the old server is running the only certificate service in the domain. Do I need to take any special steps, or can I just run the certificate service on the new server?
Update: It seems that my root certificate expired a few days ago. Would I be just as well off moving to the new server directly as renewing the old certificate?
Your best bet is to back up the certificate store on your old server and restore it to the new server. TechNet has an article describing how to do it at http://technet.microsoft.com/en-us/library/cc755153%28WS.10%29.aspx