Change Validity period on Web Server template

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Randy <Randy@xxxxxxxxxxxxxxxxxxxxxxxxx>
Date: Wed, 2 Sep 2009 05:12:01 -0700

I have a 2003 Enterprise CA and would like to be able to issue Web SSL certs
for a period longer than the default of 2 years. I created a template from
the existing Web Server template and set the VP to 10 years. My CA
certificate max is 20 years. I then added my new Cert Template to the
Certificate Templates of the CA

If I use IIS to submit a request to an online CA it just gives me the
standard 2 year cert. If I generate a request to submit later and then try
and do the web enrollment selecting my new template, I get a message:

"Your certificate request was denied.

Your Request Id is 37. The disposition message is "Denied by Policy Module".

So I don't know how to allow people to request a certificate and use the new
template to get a longer Validity period.

Please help!
.

Prev by Date: Re: I am running a batch file for creating new users in the Active Dir
Next by Date: Re: New Server -Coming from SBS2003 domain
Previous by thread: Create A Macro to Take Scheduled Actions
Next by thread: Rearranging Hard Drives
Index(es):
- Date
- Thread

Relevant Pages

Re: Unable to install Godaddy cert on SBS R2 Standard box
... I recently bought a ten year Turbo SSL cert, but I want to rebuild my server ... "Please create a new request,and request for a new certificate from ... Godaddy(issue a new certificate),then install the new certificate. ...
(microsoft.public.windows.server.sbs)
Re: Cert Server - Changed Enterprise CA
... So as per the Instructions I added an IPSec Cert Template and added that to ... the Default Group Policy. ... 323342 How to install a certificate for use with IP Security in Windows ...
(microsoft.public.win2000.active_directory)
Re: How to renew a certificate programmicaly
... Name 2 extension must contain a UPN entry, ... Please notice that the application> policy restriction is "Enrollment Agent" and that the "old certificate" does> not have this application policy. ... > I cannot see this template in the MMC snapin, I guess it is because it has> "X number of authotized signatures" and "Subject details supply in request". ...
(microsoft.public.platformsdk.security)
Re: IIS cert denied
... Start the Certificate Services service. ... Grant Read and Enroll access for the template to the appropriate user ... > I am using Server 2003 and was trying to create a new cert ... When I finish and the request is just about to be ...
(microsoft.public.inetserver.iis.security)
Re: Problems requesting computer certificates on an issuing CA
... The exact permissions on my template are: ... I tried to manually enroll for a computer certificate based on ... CA allows the computers to request certificates. ...
(microsoft.public.windows.server.security)