PKI-CA-Backup.cmd

@echo off

Set BkpId=srv-ca01.txt

C:
cd \CA\Backup\DB

%systemroot%\system32\certutil -backup -v -f -p Pa$$w0rd C:\CA\Backup\DB

cd \CA\Backup\REG

reg export HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CertSvc\Configuration srv-ca01-cfg.reg /y
reg save HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CertSvc srv-ca01-cfg.hiv /y

::reg load HKLM\Temp C:\CA\Backup\REG\srv-ca01-cfg.hiv
::reg unload HKLM\Temp


net stop CertSvc && net start CertSvc

cd \CA\Backup\

::echo. > %BkpId%
echo Backup time: > %BkpId%
echo. >> %BkpId%
date /t >>%BkpId%
echo.
time /t >>%BkpId%

robocopy C:\CA\Backup\ \\DOMAIN\DFS\BackUp\PKI\SRV-CA01\ /PURGE /S /R:5 /W:60 /TEE /NP /LOG:C:\CA\Scripts\CA-Backup-Copy.log