Change the Expiry period for the CA/Local Certificate in Window Server 2003

• 問題

• 

  

  0

  登入以投票

  Hi Sir/Madam,

  I try to generate the private key file(.csr). And I insert it into the Cert Server of Window Standard Server 2003(32 bits) which is http://127.0.0.1/certsrv to produce the local Certificate (Base 64 encoded) with 1 year certificate license. The local certificate is work with Fortigate firewall to process VPN and it is successful. But the problem is that the certificate is only 1 year valid and I want to extend the cert to 5-10 years. I search for the website and forum and they teach me that modify the regedit key in HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CertSvc\Configuration\<CAName> of Window Standard Server 2003 such as ValidityPeriod change to "Years" and ValidityPeriodUnits change to "10"(Apply to my case). Finally stop and start the Certificate Services again . But it won't work, when I generate again the Certificate, the Certificate is still valid for 1 year only. Are there any procedures that I am missing or any other methods I can work with. Thanks all of you.

  Alan

  2012年11月24日 上午 03:58