Re: Root Certificate - Increase Key Length

From: krish shenoy[MS] (
Date: 12/17/02

From: "krish shenoy[MS]" <>
Date: Tue, 17 Dec 2002 13:07:24 -0800

You would have to renew the CA with a new key, using a %windir%\CAPolicy.inf

I think this is described in the help text.

The following should suffice:


Signature = "$Windows NT$"


RenewalKeyLength = 4096

This posting is provided "AS IS" with no warranties and confers no rights.
Use of any included samples is subject to the terms specified at"
"Paul MacKenzie" <> wrote in message
> We have Windows 2000 Certificate Services installed and failed to change
> default key length when installing our Enterprise Root CA.  Is there a way
> to renew the root certificate and change the key length to 4096 without
> affecting the certificates already issued by this CA?  TIA