is there a way

[Guest Gunna]

to find out what the ValiditiyPeriod and ValiditiyPeriodunits are set to on a

Certificate server? I though certutil would tell me but i cant figure out

the damn switches etc..

[Guest Unai Castro]

With certutil you can view and modify these parameters:

 

To view:

certutil -getreg ca\ValidityPeriodUnits

certutil -getreg ca\ValidityPeriod

 

To modify:

certutil -setreg ca\ValidityPeriodUnits <Units>

certutil -setreg ca\ValidityPeriod <Period>

Then you must restart Certificate Services

 

For example if you want set the validity period to 10 years, execute in a cmd:

certutil -setreg ca\ValidityPeriodUnits 10

certutil -setreg ca\ValidityPeriod "Years"

net stop certsvc && net start certsvc

 

You can view all parameters of certutil on this link:

http://technet.microsoft.com/en-us/library/cc732443.aspx

 

--

Unai Castro

MCSA 2003

 

 

"Gunna" wrote:

<span style="color:blue">

> to find out what the ValiditiyPeriod and ValiditiyPeriodunits are set to on a

> Certificate server? I though certutil would tell me but i cant figure out

> the damn switches etc..</span>

[Guest Gunna]

Brian,

 

As a matter of fact I am reading your book right now, just havent got that

far.

 

"Brian Komar (MVP)" wrote:

<span style="color:blue">

> You did not really try that hard.

> certutil -getreg caValidityPeriod

> certutil -getreg caValidityPeriodUnits

> It is in the Best Practices whitepaper and most PKI documentation from MS

> Brian

>

> "Gunna" <Gunna@discussions.microsoft.com> wrote in message

> news:D6D3F1DE-06C3-4A4E-8E9F-C36A1090531F@microsoft.com...<span style="color:green">

> > to find out what the ValiditiyPeriod and ValiditiyPeriodunits are set to

> > on a

> > Certificate server? I though certutil would tell me but i cant figure out

> > the damn switches etc.. </span>

> </span>