To renew your CA's root certificate, take the following steps:
- Log into the Enterprise Root CA server and open the Certification Authority management console.
- Right-click on the name of your CA, navigate to All Tasks and then choose Renew CA Certificate...:
If you haven't stopped ADCS during this process, you will be prompted to do so. Go ahead and click Yes in order to stop the certificate processes temporarily.
- On the Renew CA Certificate screen, you only have one option to worry about. You need to choose whether you want to generate a new key pair for the new root certificate or re-use the existing one. If you have published ...