I currently have two Windows 2008 servers running Zenworks 11.2.1. There is one server on the LAN and one server in the Perimeter network (laptop users) with an external SQL 2008 R2 server. I am using an internal certificate.

I need to transition these servers to Windows 2008 R2 and I can have no interruption to the clients.

My thoughts are to just add two new servers, one internal and one external and then decomission the old boxes.

How can I move the certificate to the new server without any client interruption? Also is it possible to change from an internal cert to external cert?

Is there any gotchas that I should be aware of?