Re: Renewal root certificate authority, what happens to user certifica

Hello NICO Rodriguez Sanchez NICO Rodriguez,

I will crosspost this to:
microsoft.public.windows.server.security

That's the better place for asking.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> 8:52:03 Nicolas
> Pregunta inicial/Comentarios: Renewal root certificate authority, what
> happens to user certificates created before?
> 8:52:03 Sistema
> https://technet.microsoft.com/subscr...e/default.aspx
> 8:52:09 Sistema
> ¡Ice Lee se ha unido a esta sesión!
> 8:52:09 Sistema
> Conectado con Ice Lee
> 8:52:29 Ice Lee
> Thank you for contacting the TechNet Online Concierge, Nicolas. Please
> give
> me a moment while I review your question.
> 8:53:19 Ice Lee
> May I have more details about your question?
> 8:53:44 Nicolas
> hello, we have a root certificate authority which ends en 14 december
> 2009
> 8:54:02 Nicolas
> and we have user certificates created than end on the same date
> 8:54:28 Nicolas
> so I would like to renew the root certificate for 3 years and
> 8:54:40 Nicolas
> my answer is
> 8:55:24 Nicolas
> what happens with all the valid certificates that I have now? Will
> they
> continue being valid? Until when?
> 8:56:11 Ice Lee
> Thanks for the details, Nicolas. Please understand we are not
> technical
> specialists. As Online Concierge, I'll try my best to help you locate
> any
> relevant documents and articles. If I cannot find anything helpful,
> I'll
> offer other support options for you, is this okay?
> 8:57:04 Nicolas
> Can I continue using the client certificates until December and renew
> them
> for example on november with the new end date?
> 8:58:05 Ice Lee
> I understand your concern. Please give me one moment to check this for
> you.
> 8:58:56 Nicolas
> My concern is the following: If I renew the root certificate today,
> will the
> user certificates continue working?
> 8:59:12 Nicolas
> Or should I renew all of them today?
> 8:59:45 Nicolas
> Or I have time until december to renew them?
> 9:01:36 Ice Lee
> May I know why you need to renew your root certificate authority today
> since
> it ends on 4 December 2009?
> 9:03:35 Nicolas
> Because the user certificates have a life of 1 year by default, but
> when I
> renew them the end date is on december (less than one year) and the
> users are
> remote users and I see them to renew the certificates a few times ,
> for
> example tomorrow
> 9:04:46 Nicolas
> I would like to have valid certificates for a hole year, not by a few
> months
> 9:05:12 Nicolas
> that is why I want to renew the root certificate for 3 years more
> 9:05:23 Ice Lee
> I see...
> 9:06:12 Nicolas
> so that when I renew the cliente certificates tomorrow they have a
> valid
> date until 06 march 2010 and not until 14 december 2009
> 9:07:05 Ice Lee
> I got you now. Thanks for your explanation.
> 9:07:29 Nicolas
> Thank you for your time
> 9:08:41 Ice Lee
> I haven't located a confirmed answer to your question at this moment
> but you
> may want to take a look at the following general article:
> Renewing a certification authority
> http://technet.microsoft.com/en-us/l.../cc740209.aspx
> 9:09:26 Nicolas
> Tomorrow I will only renew 14 certificates, but I have more than 100,
> so my
> concern is about the 86 certificates than I won't renew by thees days
> 9:09:55 Nicolas
> Will they continue working? Until 14 december 2009?
> 9:10:37 Nicolas
> I believe that they will continue working, but I don't find it in any
> article
> 9:11:59 Nicolas
> I read the web page but I didnt see the answer to my concern
> 9:12:21 Ice Lee
> Nicolas, I'm afraid I had no luck locating the confirmed information.
> I'd
> recommend you to post this question to TechNet Managed Newsgroup where
> you
> may get guarenteed response from our support engineer.
> 9:12:56 Ice Lee
> You may post this question to:
> TechNet Managed Newsgroups
> http://technet.microsoft.com/en-us/s...7.aspx#securit
> y
> "microsoft.public.security"
> 9:13:46 Ice Lee
> I'll send you an e-mail explaining how to configure TechNet Managed
> Newsgroup to get guaranteed response from our support engineers. May I
> send
> it to ?
> 9:14:00 Nicolas
> Yes, thank you!
> 9:14:35 Ice Lee
> My pleasure. I'm sorry for not being able to give you any confirmed
> information. May I know if there is anything else I could help you
> with at
> this moment?
> 9:14:53 Nicolas
> How long does it take to have an answer in this forum?
> 9:15:21 Ice Lee
> The guarenteed response is within 1 business day.
> 9:15:39 Nicolas
> Thank you for your support
> 9:16:09 Ice Lee
> Always a pleasure. Have a nice day and take care, Nicolas.