How do you create a certificate that lasts longer than one year?

Discussion in 'Server Security' started by Paul Company, Sep 20, 2004.

  1. Paul Company

    Paul Company Guest

    I'm currently using the web server method of requesting and installing an
    IPSEC certificate,
    but the certificates created are only valid for one year.

    How do I create a certificate that lasts longer than a year?

    And how can I automate the process of creating user certificates?

    Does anyone have any "specific" examples on how to use certreq.exe to
    request a certificate from a CA
    that lasts longer than a year?

    Thanks,

    paul
     
    Paul Company, Sep 20, 2004
    #1
    1. Advertisements

  2. Paul Company

    Brian Komar Guest

    You need to do the following:
    1) Use Windows Server 2003, Enterprise Edition
    2) ensure that the CA is installed as an enterprise root
    CA or an enterprise subordinate CA
    3) Create a version 2 certificate template based on
    IPSec, and set the lifetime of the certificate to the
    period you wish
    4) ensure that the CA's certificate is valid for a
    period equal to or greater than the period defined in
    the certificate template

    Certreq will not help you define certificate lifetime as
    you wish.

    Brian
     
    Brian Komar, Sep 20, 2004
    #2
    1. Advertisements

  3. David Cross [MS], Sep 20, 2004
    #3
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.