Certificate templates with standalone CA
Windows Server Forum Index Windows Server
Server discussion on Windows platform.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web winserverhelp.com
Certificate templates with standalone CA

 
Post new topic   Reply to topic    Windows Server Forum Index -> Security
Author Message
Dave
Guest





Posted: Fri Oct 07, 2005 4:50 pm    Post subject: Certificate templates with standalone CA Reply with quote

Hi,

we have a standalone CA (Win 2003 Std) and issue certificates with it. When
I issue a certificate for signing code it is valid for one year (standard
settings) - I would like to be able to issue a certificate that lasts for 2
years. In the certificate templates I can copy the existing template and
make the necessary changes - how do I make this template available?

Thanks for your help,
Dave
Back to top
Brian Komar [MVP]
Guest





Posted: Fri Oct 07, 2005 8:50 pm    Post subject: Re: Certificate templates with standalone CA Reply with quote

In article <eEGkHi0yFHA.3256@TK2MSFTNGP09.phx.gbl>, dave@nospam.com
says...
Quote:
Hi,

we have a standalone CA (Win 2003 Std) and issue certificates with it. When
I issue a certificate for signing code it is valid for one year (standard
settings) - I would like to be able to issue a certificate that lasts for 2
years. In the certificate templates I can copy the existing template and
make the necessary changes - how do I make this template available?

Thanks for your help,
Dave



Certificate Templates are only available from an enterprise CA. See the

certificate templates whitepaper available at:

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/deploy/co
nfeat/ws03crtm.asp

You could also attempt to increase the validity period of certificates
issued by the standalone CA:

certutil -setreg CA\ValidityPeriodUnits 2
certutil -setreg CA\ValidityPeriod "Years"
net start certsvc & net stop certsvc

Brian
Back to top
 
Post new topic   Reply to topic    Windows Server Forum Index -> Security All times are GMT
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




New Topics Powered by phpBB