Change Validity period on Web Server template

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Randy <Randy@xxxxxxxxxxxxxxxxxxxxxxxxx>
Date: Wed, 2 Sep 2009 05:12:01 -0700

I have a 2003 Enterprise CA and would like to be able to issue Web SSL certs
for a period longer than the default of 2 years. I created a template from
the existing Web Server template and set the VP to 10 years. My CA
certificate max is 20 years. I then added my new Cert Template to the
Certificate Templates of the CA

If I use IIS to submit a request to an online CA it just gives me the
standard 2 year cert. If I generate a request to submit later and then try
and do the web enrollment selecting my new template, I get a message:

"Your certificate request was denied.

Your Request Id is 37. The disposition message is "Denied by Policy Module".

So I don't know how to allow people to request a certificate and use the new
template to get a longer Validity period.

Please help!
.

Prev by Date: Re: I am running a batch file for creating new users in the Active Dir
Next by Date: Re: New Server -Coming from SBS2003 domain
Previous by thread: Create A Macro to Take Scheduled Actions
Next by thread: Rearranging Hard Drives
Index(es):
- Date
- Thread

Relevant Pages

Re: Unable to install Godaddy cert on SBS R2 Standard box
... I recently bought a ten year Turbo SSL cert, but I want to rebuild my server ... "Please create a new request,and request for a new certificate from ... Godaddy(issue a new certificate),then install the new certificate. ...
(microsoft.public.windows.server.sbs)
Re: PEAP-TLS with MS NPS
... that other then install, and duplicate the template. ... "The user or computer certificate is configured with the Client ... Authentication purpose in Application Policies extensions (also called ... but the workstation authentication cert ...
(microsoft.public.windows.server.networking)
Re: Cert Server - Changed Enterprise CA
... So as per the Instructions I added an IPSec Cert Template and added that to ... the Default Group Policy. ... 323342 How to install a certificate for use with IP Security in Windows ...
(microsoft.public.win2000.active_directory)
Re: How to renew a certificate programmicaly
... Name 2 extension must contain a UPN entry, ... Please notice that the application> policy restriction is "Enrollment Agent" and that the "old certificate" does> not have this application policy. ... > I cannot see this template in the MMC snapin, I guess it is because it has> "X number of authotized signatures" and "Subject details supply in request". ...
(microsoft.public.platformsdk.security)
Re: IIS cert denied
... Start the Certificate Services service. ... Grant Read and Enroll access for the template to the appropriate user ... > I am using Server 2003 and was trying to create a new cert ... When I finish and the request is just about to be ...
(microsoft.public.inetserver.iis.security)