I want a peaceful transition from an old standalone CA into an enterprise CA. I am intending to offline the server on completion of this process.
My thought process is to publish a CRL with a long window on the standalone CA and stop the certificate services. From here I'm thinking that I should be able to simply stop the certificate services and build out my enterprise CA as if the standalone box does not exist.
I realize that in doing this I will not be able to revoke certificates on my existing standalone server and that I will eventually need to pull the reference to my old certificate server out of Active Directory.
Are there any hangups I should be aware of going this route and / or a cleaner alternative? I am specifically concerned about having two boxes as authorized CAs in AD.
I realize that this question may cover some of the same ground as this previous question but I'm not looking to keep my old server online.