ca - certificate validity question

microsoft.public.windows.server.security - Supporting MS Windows network? Read here before it's too late! 

Subject Author Date ca - certificate validity question <paramr 11-08-2008  Re: ca - certificate validity question neo [mvp outloo... 11-08-2008  Re: ca - certificate validity question <paramr 11-08-2008  Re: ca - certificate validity question neo [mvp outloo... 11-08-2008

Posted by <paramr on November 8, 2008, 5:32 am Please log in for more thread options Hi all, I have setup a windows 2003 CA server. I noticed the certificates being issued (both client and server certs for iis) are valid for a period of 1 year. How can I change this to 2 years or more? TIA! Posted by neo [mvp outlook] on November 8, 2008, 9:04 am Please log in for more thread options Might want to double check the type of certificate being issued. If I'm not mistaken, a certificate issued based on the "Computer" certificate template is good for 1 year. A certificate based on the "Web Server" certificate template is good for 2 years. Other than that, if you want to change the defaults on the built-in templates, you must be running Windows 2003 Enterprise Edition if you wish to create custom certificate templates that deviate from the built-in duration/expiration periods. show/hide quoted text > Hi all, > I have setup a windows 2003 CA server. I noticed the certificates being > issued (both client and server certs for iis) are valid for a period of 1 > year. How can I change this to 2 years or more? > TIA! > Posted by <paramr on November 8, 2008, 10:36 am Please log in for more thread options My DC is Windows 2003 Std Edition. Can it be upgraded to Enterprise Edition? If I am doing an upgrade, does it make sense to upgrade to Server 2008 Enterprise? show/hide quoted text > Might want to double check the type of certificate being issued. If I'm > not mistaken, a certificate issued based on the "Computer" certificate > template is good for 1 year. A certificate based on the "Web Server" > certificate template is good for 2 years. > Other than that, if you want to change the defaults on the built-in > templates, you must be running Windows 2003 Enterprise Edition if you wish > to create custom certificate templates that deviate from the built-in > duration/expiration periods. >> Hi all, >> I have setup a windows 2003 CA server. I noticed the certificates being >> issued (both client and server certs for iis) are valid for a period of 1 >> year. How can I change this to 2 years or more? >> TIA! > Posted by neo [mvp outlook] on November 8, 2008, 1:51 pm Please log in for more thread options Windows 2003 Standard Edition (SP1, SP2, or R2) can be upgraded to the enterprise version of Server 2008. However keep in mind you are working with a DC and you should do a futher review to ensure an upgrade is the best choice for your site. show/hide quoted text > My DC is Windows 2003 Std Edition. Can it be upgraded to Enterprise > Edition? If I am doing an upgrade, does it make sense to upgrade to Server > 2008 Enterprise? >> Might want to double check the type of certificate being issued. If I'm >> not mistaken, a certificate issued based on the "Computer" certificate >> template is good for 1 year. A certificate based on the "Web Server" >> certificate template is good for 2 years. >> Other than that, if you want to change the defaults on the built-in >> templates, you must be running Windows 2003 Enterprise Edition if you >> wish to create custom certificate templates that deviate from the >> built-in duration/expiration periods. >>> Hi all, >>> I have setup a windows 2003 CA server. I noticed the certificates being >>> issued (both client and server certs for iis) are valid for a period of >>> 1 year. How can I change this to 2 years or more? >>> TIA! > Similar Threads Posted certificate validity in Certificates MMC snap-in October 4, 2005, 4:27 pm utility to check certificate validity October 5, 2005, 8:51 am Certificate template validity extension September 23, 2009, 6:55 am Extend certificate validity time on Windows Standard CA November 14, 2008, 4:08 am Certificate Services Question September 16, 2005, 1:16 pm Certificate Services Question November 4, 2005, 10:59 am Certificate Server question February 27, 2009, 10:13 am Question regarding Certificate Trust Lists November 20, 2007, 4:38 pm Re: CA Question - Web Enrollment User Certificate October 29, 2009, 1:40 pm Certificate Infrastructure - Domain Upgrade Question January 21, 2010, 2:56 pm