Skip to main content

Legacy Microsoft CA connectors

On July 18, 2024, DigiCert released an updated version of the Microsoft CA connector for DigiCert​​®​​ Trust Lifecycle Manager that deprecated the need for installing the Microsoft CA Remoting Service (MCARS) software on the Microsoft CA server.

The new connector includes all the same capabilities as the previous Microsoft CA connectors, but is easier to set up and maintain.

In the new integration architecture, the DigiCert sensor communicates directly with the Microsoft CA without the need to install any software on the Microsoft CA server.

Support for legacy connectors

If you have legacy MCARS-based Microsoft CA connectors in your Trust Lifecycle Manager account added prior to July 18, 2024, you can can still use those connectors to issue and import certificates from your Microsoft CAs.

However, DigiCert recommends replacing your legacy Microsoft CA connectors at your convenience with new connectors based on the new and more efficient integration architecture.

How to identify legacy connectors

To identify legacy MCARS-based Microsoft CA connectors in your Trust Lifecycle Manager account:

  1. Select Integrations > Connectors from the Trust Lifecycle Manager main menu.

  2. All Microsoft CA connectors have the following properties in the connectors table:

    • Provider: Microsoft

    • Type: Certificate authority

  3. Select a Microsoft CA connector by name to see the details for it.

  4. Look in the Linked account details section of the connector details:

    • Legacy Microsoft CA connectors have a Base URL field here.

    • New Microsoft CA connectors have Hostname and CA name fields instead.

Replace legacy connectors

To replace a legacy MCARS-based Microsoft CA connector in your Trust Lifecycle Manager account:

  1. Delete the legacy MCARS-based Microsoft CA connector in Trust Lifecycle Manager. See Manage connectors.

    Note: Deleting the connector does not remove any existing certificates or data from your Trust Lifecycle Manager account.

  2. Uninstall the MCARS software on the Microsoft CA server.

  3. Add a new connector in Trust Lifecycle Manager for the same Microsoft CA server. See Microsoft CA.

Let op

For a complete guide covering all the steps needed to integrate with and get certificates from a Microsoft CA, refer to the Microsoft CA server integration guide.

Questions?

Contact your DigiCert account representative if you have questions or need help replacing your legacy Microsoft CA connectors.