The validity period defined in the template applies to all certificates issued by any Enterprise CA in the Active Directory forest. Windows Server 2003 Enterprise Edition supports Version 2 certificate templates that can be modified. Windows 2000 and Windows Server 2003 Standard Edition do not support modification of these templates. This value applies to all certificates that are issued by the CA.įor certificates that are issued by Enterprise CAs, the validity period is defined in the template that is used to create the certificate. For certificates that are issued by Stand-alone CAs, the validity period is determined by the registry entry that is described later in this article. For Stand-alone CAs, the default registry setting is one year. For Enterprise CAs, the default registry setting is two years. The validity period that is defined in the registry affects all certificates that are issued by Stand-alone and Enterprise CAs. There may be situations when you have to override the default expiration date for certificates that are issued by an intermediate or an issuing CA. After one year, the certificate expires and is not trusted for use. This article describes how to change the validity period of a certificate that is issued by Certificate Authority (CA).Īpplies to: Windows 10 - all editions, Windows Server 2012 R2 Original KB number: 254632 Summaryīy default, the lifetime of a certificate that is issued by a Stand-alone Certificate Authority CA is one year.
0 Comments
Leave a Reply. |