Ondrej Žilinec – IT Blog

You can configure expiration period for Certification Template. By default there are default maximum validation periods set to:

• One year for Stand-alone Certification Authority
• Two years for Enterprise Certification Authority

This means you have Certification Template set its validity for example for 10 years, but you can enroll certificates with validity 1 or 2 years (Stand-alone / Enterprise Certification Authority).

This can be changed via registry keys described in KB254632.

Thank you for my colleague Róbert Švec.

Once upon the time I played with enterprise certification authority at one of our customers. I’ve created new certificate for certification authority. And then problem begun.

Read more…