From 83c0bf3444852f3209406ce4c02d83482119c740 Mon Sep 17 00:00:00 2001
From: chcart <120026950+chcart@users.noreply.github.com>
Date: Fri, 21 Nov 2025 10:24:56 -0600
Subject: [PATCH] Remove "you can rollback by just reinstalling" messaging.

Removed
"The CA database, private key, and certificate aren't removed from the source server by removing the CA role service. Therefore, reinstalling the CA role service on the source server restores the source CA if migration fails and performing a rollback is required, " as the first sentence is misleading and the second sentence is just completely wrong.  Reinstalling the CA role overwrites the CA database and you lose everything in it.
---
 .../identity/ad-cs/migrate-certification-authority.md           | 2 --
 1 file changed, 2 deletions(-)

diff --git a/WindowsServerDocs/identity/ad-cs/migrate-certification-authority.md b/WindowsServerDocs/identity/ad-cs/migrate-certification-authority.md
index 857b377a5c..e9ab20faa1 100644
--- a/WindowsServerDocs/identity/ad-cs/migrate-certification-authority.md
+++ b/WindowsServerDocs/identity/ad-cs/migrate-certification-authority.md
@@ -221,8 +221,6 @@ By default, the CRL validity period is equal to the CRL publishing period plus 1
 
 It's important to remove the CA role service from the source server after completing backup procedures and before installing the CA role service on the destination server. Enterprise CAs and standalone CAs that are domain members store in Active Directory Domain Services (AD DS) configuration data that is associated with the common name of the CA. Removing the CA role service also removes the CAs configuration data from AD DS. Because the source CA and destination CA share the same common name, removing the CA role service from the source server after installing the CA role service on the destination server removes configuration data that is required by destination CA and interferes with its operation.
 
-The CA database, private key, and certificate aren't removed from the source server by removing the CA role service. Therefore, reinstalling the CA role service on the source server restores the source CA if migration fails and performing a rollback is required.
-
 > [!WARNING]
 > Although it isn't recommended, some administrators may choose to leave the CA role service installed on the source server to enable the source CA to be brought online quickly if migration fails. If you choose not to remove the CA role service from the source server before installing the CA role service on the destination server, it's important that you disable the Active Directory Certificate Services service (Certsvc) and shut down the source server before installing the CA role service on the destination server. Don't remove the CA role service from the source server after completing the migration to the destination server.