Maximum Validity For Certificates
You can configure expiration period for Certification Template. By default there are default maximum validation periods set to:
-
One year for Stand-alone Certification Authority
- Two years for Enterprise Certification Authority
This means you have Certification Template set its validity for example for 10 years, but you can enroll certificates with validity 1 or 2 years (Stand-alone / Enterprise Certification Authority).
This can be changed via registry keys described in KB254632.
Thank you for my colleague Róbert Švec.
Categories: Security, Windows authority, certification, maximum validity, one year, two years, Windows
Recent Comments