Tuesday, July 23, 2024

Howto extend a validity period in the Enterprise Root CA

It might come the time where you need to change the validity period from SSL certificates issues by your Windows CA. Changing that required some changes to the CA itself at first.

So the first step would be to check what is the current settings via:

certutil -getreg ca\ValidityPeriod
certutil -getreg ca\ValidityPeriodUnits

If you wish to change that then to 10 years use the following:

certutil –setreg ca\ValidityPeriod Years
certutil -setreg ca\ValidityPeriodUnits 10

After that your certificates can be issues (via the certificate template) up to 10 years.

Related Articles


Please enter your comment!
Please enter your name here

Stay Connected

- Advertisement -

Latest Articles