Change Root CA usage

microsoft.public.windows.server.security - Supporting MS Windows network? Read here before it's too late! 

Subject Author Date Change Root CA usage Gunna 02-04-2010

Posted by Gunna on February 4, 2010, 7:56 pm Please log in for more thread options I had my PKI audited and was told that the Key usage of my Root CA certificate was "non standard" This is what I have Non-Repudiation, Certificate Signing, Off-line CRL Signing, CRL Signing (46) and was told it should be (86) I have to reissue the certificate soon as it is expiring, is there a section I can edit in the capolicy.inf to change this key usage and will there be any adverse impact if I change it? Similar Threads Posted Change security desc. on root folder January 31, 2007, 10:34 am services.exe memory usage August 30, 2006, 12:20 pm PKI - CA setup key usage problem January 14, 2009, 1:09 am Monitoring of Internet Usage by Staff March 2, 2006, 6:17 am User account management and information functions usage with trusteddomains October 27, 2005, 3:55 pm User account management and information functions usage with trusteddomains November 2, 2005, 3:16 pm Migrate Enterprise root authority CA to stand-alone root CA December 13, 2005, 7:57 am Stans-alone root CA or Enterprise root CA August 31, 2006, 6:32 pm Re: Existing Root CA -> New Root / Sub CA Hierarchy August 3, 2009, 3:06 am Is it possible to change computer sid on AD? February 8, 2006, 3:32 pm