Templates supported by Windows 2000 and Windows Server 2003 Standard Edition cannot be modified. This applies to the stand-alone CA, and Subordinate CA certificates issued by the Enterprise CA. The registry validity period that is noted earlier in this article. A certificate that is issued by a CA is valid for the minimum of the following periods of time: The validity period defined in the template applies to all certificates issued by any Enterprise CA in the Active Directory forest. Windows Server 2003 Enterprise Edition supports Version 2 certificate templates that can be modified. Windows 2000 and Windows Server 2003 Standard Edition do not support modification of these templates. This value applies to all certificates that are issued by the CA.įor certificates that are issued by Enterprise CAs, the validity period is defined in the template that is used to create the certificate. For certificates that are issued by Stand-alone CAs, the validity period is determined by the registry entry that is described later in this article. For Stand-alone CAs, the default registry setting is one year.
For Enterprise CAs, the default registry setting is two years. The validity period that is defined in the registry affects all certificates that are issued by Stand-alone and Enterprise CAs. There may be situations when you have to override the default expiration date for certificates that are issued by an intermediate or an issuing CA.
After one year, the certificate expires and is not trusted for use.
010 EDITOR CHANGE NAME OF APPLICATION HOW TO
This article describes how to change the validity period of a certificate that is issued by Certificate Authority (CA).Īpplies to: Windows 10 - all editions, Windows Server 2012 R2 Original KB number: 254632 Summaryīy default, the lifetime of a certificate that is issued by a Stand-alone Certificate Authority CA is one year.
0 kommentar(er)
