Re: renew CA certificate

From: Carma Trepp (only_n_groups_account_but_works_at_yahoo.de)
Date: 09/20/05 

Date: Tue, 20 Sep 2005 10:11:45 +0200

Brian Komar [MVP] wrote:
> It depends on whether the CA is a root CA or a subordinate CA.
> If it is a root CA.
>
> 1) Create or edit %windir%\capolicy.inf
> 2) Add the following content, for example, to renew with a 10 year
> validity period and a 2k key
>
> [Version]
> Signature="$Windows NT$"
>
> [certsrv_server]
> renewalkeylength=2048
> RenewalValidityPeriodUnits=10
> RenewalValidityPeriod=years
>
> HTH,
> Brian

Hey thanks you, works great!

Greetings
Carma

Relevant Pages

  • Re: setting up 2-Tier CA Environment
    ... Then use the subordinate CA to do the job. ... Do remember to turn on the root periodically to: ... Revoke a subordinate CA certificate ... Brian Komar ...
    (microsoft.public.windows.server.security)
  • Re: Which certificate do I have to deploy ? Root CA or Subordinate CA certificate ?
    ... If a subordinate chains to a trusted root CA, ... Best bet is for your to read the certificate revocation and status checking whitepaper that describes how certificates are verified. ...
    (microsoft.public.windows.server.security)
  • Re: Offline Root Certificate Server and subordinate CA
    ... It appears that I did not correctly set up my CRL and AIA publication ... I deployed my enterprise offline root and subordinate CA with these defaults. ...
    (microsoft.public.win2000.security)
  • Re: Which certificate do I have to deploy ? Root CA or Subordinate CA certificate ?
    ... "Only root CA certificates must be trusted and registered on client computers. ... So I am not understanding that I have to trust the subordinate CA as you said. ... My question is which certificate should I have to deploy to my computer Trusted Root Certification Authorities Store? ... If we have installed the Root CA in our domain member computers, then they will trust every certificate delivered by the new subordinate Enterprise CA, am I right? ...
    (microsoft.public.windows.server.security)
  • Re: .NET 1.1 Virtual Directory in a .NET 2.0 Website
    ... Juan T. Llibre, asp.net MVP ... asp.net faq: http://asp.net.do/faq/ ... John Timney (MVP) ... IIS webs will always inherit from the root node. ...
    (microsoft.public.dotnet.framework.aspnet)