Extend Certificate Expiration – Windows Certificate Services

have you noticed that Certs you create on your Standalone or intermediate CA have a 1 year lifespan even if your CA has a 10 or 20 etc. year cert?  Here is how to create certs with longer validity!  Do this from the CA at the command prompt.

certutil -setreg CA\ValidityPeriod “Years”
certutil -setreg CA\ValditiyPeriodUnits 10

then restart certificate services.

Leave a Reply

Your email address will not be published. Required fields are marked *