Change expiration date of certificates issued by CA

To change the validity period settings for a CA, follow these steps.

Important

This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, see How to back up and restore the registry in Windows.

1. Click Start, and then click Run.
2. In the Open box, type regedit, and then click OK.
3. Locate, and then click the following registry key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CertSvc\Configuration\<CAName>
4. In the right pane, double-click ValidityPeriod.
5. In the Value data box, type one of the following, and then click OK:
   • Days
   • Weeks
   • Months
   • Years
6. In the right pane, double-click ValidityPeriodUnits.
7. In the Value data box, type the numeric value that you want, and then click OK. For example, type 2.
8. Stop, and then restart the Certificate Services service. To do so:
   1. Click Start, and then click Run.
   2. In the Open box, type cmd, and then click OK.
   3. At the command prompt, type the following lines. Press ENTER after each line. Console

net stop certsvc
net start certsvc

Type exit to quit Command Prompt.