Certificate Services: CA store certificate has expired

  • Thread starter Thread starter Andres M
  • Start date Start date
A

Andres M

Two years ago, I configured a private CA store, the Root
CA certificate has expired, I've tried to renew but I
alwaus get Access Denied Errors, I found the following Q
articles but still no luck,,, any ideas ???

Tks

Andres
 
microsoft.public.win2000.security

Two years ago, I configured a private CA store, the Root
CA certificate has expired, I've tried to renew but I
alwaus get Access Denied Errors, I found the following Q
articles but still no luck,,, any ideas ???

Tks
Click to expand...
Is it an enterprise or a standalone CA. For a standalone CA, you must
be a local Adminstrator of the computer, and for an enterprise CA, you
must be a local Administrator and member of the Enterprise Admins.

Also, do you have a capolicy.inf file in the %windir%.
The CAPolicy.inf should have the following entries:

[certsrv_server]
renewalkeylength=2048
RenewalValidityPeriodUnits=20
RenewalValidityPeriod=years

These define the renewal private key settings.
Other settings are required and are discussed in the Best Practices WP

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/maintain/
operate/ws3pkibp.asp

Brian
 
Thanks Brian, I'm going to take a look

Andres
-----Original Message-----
microsoft.public.win2000.security

Two years ago, I configured a private CA store, the Root
CA certificate has expired, I've tried to renew but I
alwaus get Access Denied Errors, I found the following Q
articles but still no luck,,, any ideas ???

Tks
Click to expand...
Is it an enterprise or a standalone CA. For a standalone CA, you must
be a local Adminstrator of the computer, and for an enterprise CA, you
must be a local Administrator and member of the Enterprise Admins.

Also, do you have a capolicy.inf file in the %windir%.
The CAPolicy.inf should have the following entries:

[certsrv_server]
renewalkeylength=2048
RenewalValidityPeriodUnits=20
RenewalValidityPeriod=years

These define the renewal private key settings.
Other settings are required and are discussed in the Best Practices WP

http://www.microsoft.com/technet/prodtechnol/windowsserve r2003/maintain/
operate/ws3pkibp.asp

Brian
.
Click to expand...
 
Back
Top