Changing Cert template in Win2k3 Enterprise PKI CA

Changing Cert template in Win2k3 Enterprise PKI CA
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Changing Cert template in Win2k3 Enterprise PKI CA Mike Ruiz 09-16-2005
Posted by =?Utf-8?B?TWlrZSBSdWl6?= on September 16, 2005, 11:00 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Greetings,
I wasn't sure where to post this as there wasn't a PKI/MS-CA forum. But
here goes:

We deployed Enterprise CA on Windows 2000 and recently upgraded the domain
to Windows 2003 Enterprise (schema, native mode, etc.)

The User Certificates issued are still based on the v1 template "user". we
want to change the certificate lifespan from 1 to 4 years. The same with
computer certificates.

Can I replace the v1 user template with a v2 template so that is editable?
Can I edit the v1 template somehow? The v1 templates are mostly greyed out
in CertTempl.msc


Help.
Mike
--
---
Mike Ruiz
Network and Enterprise Systems Engineer
Hobart and William Smith Colleges

Posted by Brian Komar [MVP] on September 16, 2005, 3:00 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
MikeRuiz@discussions.microsoft.com says...
>
> Can I replace the v1 user template with a v2 template so that is editable?
> Can I edit the v1 template somehow? The v1 templates are mostly greyed out
> in CertTempl.msc
>
>
You must duplicate the template, and then make modifications to the
newly created version 2 certificate template. You can then set the new
template to Supersede the previous template.

For more information, see my whitepaper:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technolog
ies/security/ws03crtm.mspx

Brian

Similar ThreadsPosted
Re: Changing https to http on Win2K3 October 4, 2005, 3:42 am
Problems Installing Win2K3 Cert services March 20, 2007, 10:28 pm
X.509 Cert Template - Biometric Extensions November 3, 2005, 4:35 pm
Enterprise Root/Web Cert error October 17, 2006, 9:53 am
Root CA cert expires, I renewed but I'm unable to request new cert March 7, 2006, 3:16 pm
Commercial cert vs. Microsoft Certificate Services generated cert June 21, 2007, 4:23 am
Computer cert/User cert 802.x Authentication query August 7, 2007, 5:20 am
Upgrading to Windows 2003 Enterprise Edition Enterprise CA October 18, 2005, 4:59 am
NT4 to Win2K3 July 19, 2005, 12:35 pm
using secpol.msc on win2k3 September 29, 2006, 12:00 am

The site map in XML format XML site map

Contact Us | Privacy Policy