A manual backup of Certificate Services, a backup performed from the CA or by using the Certutil command, only includes the CA database and the CA's key pair(s). A manual backup does not include the IIS metabase or any Certificate Services registry settings. These items must be restored separately to ensure the full recovery of Certificate Services.
Note As with a System State backup, in a manual backup the CA's key pair cannot be backed up if the key pair is protected by an HSM. Details on how to exclude the key pair from the backup set when performing a manual backup is discussed later in this chapter in the section "Performing Manual Backups."
Was this article helpful?