Yes, that is possible. The best and most-supported way is installing a second server (or VM) and running your desired version on that. Then join it to the domain, install all services (ca, domain, trust controller, kra etc.). Then you can uninstall the ‘old’ server (after testing of course!). Make sure you know you have a copy of the root CA key, admin user creds, directory manager creds etc. To be sure everything is working, you can also simply shutdown the old server, and then try to enroll a second ‘new’ server, if that one successfully joins, start the old server back up and do a normal uninstall so it deletes all replications and references so you don’t end up with a ghost server. John