Get rid of the domain controller on the Certificate Services server?

Question

Active Directory

There are several controllers of the same domain based on Windows Server 2012 R2.
One of them has AD Certificate Services installed.
Is it possible to move certificate services to another server?
How painless will it be to downgrade a domain controller from ADCS to a member server?

Answer 1

There is an official guide about the transfer .
AD CS does not depend on the server having FSMO roles.