Change Validity period on Web Server template
Tech-Archive recommends: Fix windows errors by optimizing your registry
I have a 2003 Enterprise CA and would like to be able to issue Web SSL certs
for a period longer than the default of 2 years. I created a template from
the existing Web Server template and set the VP to 10 years. My CA
certificate max is 20 years. I then added my new Cert Template to the
Certificate Templates of the CA
If I use IIS to submit a request to an online CA it just gives me the
standard 2 year cert. If I generate a request to submit later and then try
and do the web enrollment selecting my new template, I get a message:
"Your certificate request was denied.
Your Request Id is 37. The disposition message is "Denied by Policy Module".
So I don't know how to allow people to request a certificate and use the new
template to get a longer Validity period.
Please help!
.
Relevant Pages
- Re: Unable to install Godaddy cert on SBS R2 Standard box
... I recently bought a ten year Turbo SSL cert, but I want to rebuild my server ... "Please create a new request,and request for a new certificate from ... Godaddy(issue a new certificate),then install the new certificate. ... (microsoft.public.windows.server.sbs) - Re: Cert Server - Changed Enterprise CA
... So as per the Instructions I added an IPSec Cert Template and added that to ... the Default Group Policy. ... 323342 How to install a certificate for use with IP Security in Windows ... (microsoft.public.win2000.active_directory) - Re: How to renew a certificate programmicaly
... Name 2 extension must contain a UPN entry, ... Please notice that the application> policy restriction is "Enrollment Agent" and that the "old certificate" does> not have this application policy. ... > I cannot see this template in the MMC snapin, I guess it is because it has> "X number of authotized signatures" and "Subject details supply in request". ... (microsoft.public.platformsdk.security) - Re: IIS cert denied
... Start the Certificate Services service. ... Grant Read and Enroll access for the template to the appropriate user ... > I am using Server 2003 and was trying to create a new cert ... When I finish and the request is just about to be ... (microsoft.public.inetserver.iis.security) - Re: Problems requesting computer certificates on an issuing CA
... The exact permissions on my template are: ... I tried to manually enroll for a computer certificate based on ... CA allows the computers to request certificates. ... (microsoft.public.windows.server.security) |
|