Certificate renewal with usb token

  • Thread starter Thread starter Joel proal
  • Start date Start date
J

Joel proal

Hi,

Do you know how to renew a certificate stored on a usb token (ikey) I
dont find any information about it. I generated them with Windows 2000
enterprise CA. It is a Smart Card User certificate.
First I tried to change the valididy but it seem impossible with a
enterprise CA.

Thanks,

Joel Proal
 
Hi,

Thanks for your answer. You are right Windows 2003 seems beter with the
administration of certificate and token. Maybe for future certificates...

I find a workaround to extend the validity of certificate but I don't
think it is a good one.
I launched adsiedit and modified the attribut for the template in
Condiguration -> Services->Public Key Services -> Certificate Template
-> SmartcardUser
The attribut is pKIExpirationPeriod

The probleme is that the date is coded:
00 80 72 0E 5D C2 FD FF is 2 years
00 40 39 87 2E E1 FE FF is 1 year

For more I don't know so I put the same as for may CA template.

I works but I don't know if I will have any side effect.

Next step would be to find the way the date is coded ( it must be ASN or
BER or things like that)

If you have any idea...


Joel Proal
 
Back
Top