how to increase certificate expiration on cert server?

  • Thread starter Thread starter jims
  • Start date Start date
J

jims

How do you increase the default lifetime of a certificate
on a Windows 2000 stand alone certificate server from 1
year to 2 years? Can't use templates because the server
is not a member of a domain. Is this a registry setting?
Thanks,
Jim
 
How do you increase the default lifetime of a certificate
on a Windows 2000 stand alone certificate server from 1
year to 2 years? Can't use templates because the server
is not a member of a domain. Is this a registry setting?
Thanks,
Jim
Click to expand...
You need to modify the combination of two registry entries at the CA:

HKLM\System\CurrentControSet\Services\CertSvc\Configuration\<CA Name>
\ValidityPeriod
HKLM\System\CurrentControSet\Services\CertSvc\Configuration\<CA Name>
\ValidityPeriodUnits

For more information, see the Best Practices white paper:

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/maintain/
operate/ws3pkibp.asp


Brian
 
Thanks Brian. That worked perfect.
Jim

-----Original Message-----

You need to modify the combination of two registry entries at the CA:

HKLM\System\CurrentControSet\Services\CertSvc\Configurati
Click to expand...
 
Back
Top