| Legal Information |
|
The certification authority (CA) is a required component of Key Management Service; if the CA is damaged, you must restore it. The restore method you use for the CA depends on the type of backups you performed. For information about the different methods of backing up the CA, see "Backing up the Certification Authority".
It is recommended that you restore the CA by restoring the full computer backup set that was created on the computer running the CA service. However, if you did not create a full computer backup set of the computer running the CA, you can restore the CA by restoring the Windows backup set of the computer running Certificate Services (the System State data portion of a Windows backup set includes the Certificate Services database). For information about how to restore full computer backup sets and Windows backup sets, see "Restoring Full Computer Backup Sets" and "Restoring Windows 2000 Backup Sets"
.
You can also use the Certification Authority Restore wizard to restore keys, certificates, and the certificate's database. You access this wizard from the Certification Authority MMC snap-in. If you use the Certification Authority MMC snap-in to restore the CA, you must also restore the IIS metabase if it has been damaged or lost.
Note If the IIS metabase is not intact, IIS will not start, and Certificate Services Web pages will not load.
You restore the IIS metabase file when you restore a Windows backup set (the System State data portion of a Windows backup set includes the IIS metabase). You can also restore the IIS metabase independently by using the IIS snap-in. For information about how to restore the CA from the Certification Authority MMC snap-in and how to back up IIS metabase from the IIS MMC snap-in, see Microsoft Knowledge Base article Q313272, "HOW TO: Back Up and Restore a Certificate Authority in Windows 2000" (http://go.microsoft.com/fwlink/?LinkId=3052&ID=313272).
Important The Certification Authority Restore wizard in the Certification Authority MMC snap-in requests that you supply a password when backing up public keys, private keys, and CA certificates.
For more information about how to preserve the root certificate, see the technical paper Exchange 2000 Server Database Recovery (http://go.microsoft.com/fwlink/?LinkId=6273).The information in this article applies to:
| Search Knowledge Base | Feedback |