Re: Root Certificate - Increase Key Length
From: krish shenoy[MS] (kshenoy@online.microsft.com)
Date: 12/17/02
- Next message: Ron Edmunds: "GPO Control Delegation"
- Previous message: Alfredo: "Re: Microsoft CA certificates expiration"
- In reply to: Paul MacKenzie: "Root Certificate - Increase Key Length"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "krish shenoy[MS]" <kshenoy@online.microsft.com> Date: Tue, 17 Dec 2002 13:07:24 -0800
You would have to renew the CA with a new key, using a %windir%\CAPolicy.inf
file.
I think this is described in the help text.
The following should suffice:
[Version]
Signature = "$Windows NT$"
[certsrv_server]
RenewalKeyLength = 4096
-- This posting is provided "AS IS" with no warranties and confers no rights. Use of any included samples is subject to the terms specified at http://www.microsoft.com/info/copyright.htm" "Paul MacKenzie" <mackenziep@silberline.com> wrote in message news:uIs4ubUpCHA.2456@TK2MSFTNGP12... > We have Windows 2000 Certificate Services installed and failed to change the > default key length when installing our Enterprise Root CA. Is there a way > to renew the root certificate and change the key length to 4096 without > affecting the certificates already issued by this CA? TIA > >
- Next message: Ron Edmunds: "GPO Control Delegation"
- Previous message: Alfredo: "Re: Microsoft CA certificates expiration"
- In reply to: Paul MacKenzie: "Root Certificate - Increase Key Length"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
