<div>
So current certs will still be valid but in order to take advantage of the new certificate life span I need to reissue the certs?
</div>


So current certs will still be valid but in order to take advantage of the new certificate life span I need to reissue the certs?

<div>
<div class="content wysiwyg-content">
Does changing Certificate validty period on Cert server affect current issued certs. We want to use the following to use when issuing new certificates but don't want to invalidate any current certificates.<br />
And does the &nbsp;'certutil -renew reusekeys' &nbsp;just extend current issued certs? Not experienced with CA but need to address this issue at work and we have alot of self signed certs in our departments.<br />
<br />
certutil -setreg ca\ValidityPeriod=Years<br />
certutil -setreg ca\ValidityPeriodUnits=100<wbr /><br />
certutil -setreg ca\RenewalValidityPeriod=Y<wbr />ears<br />
certutil -setreg ca\RenewalValidityPeriodUn<wbr />its=100<br />
net stop certsvc &amp;&nbsp;net start certsvc<br />
<br />
You can verify the settings by substituting &quot;-getreg&quot; for &quot;-setreg&quot;<br />
<br />
After that, you can use the 'certutil -renew reusekeys' command to renew the certificate.<br />
&nbsp;
</div>
</div>


Does changing Certificate validty period on Cert server affect current issued certs. We want to use the following to use when issuing new certificates but don't want to invalidate any current certificates.
And does the  'certutil -renew reusekeys'  just extend current issued certs? Not experienced with CA but need to address this issue at work and we have alot of self signed certs in our departments.

certutil -setreg ca\ValidityPeriod=Years
certutil -setreg ca\ValidityPeriodUnits=100
certutil -setreg ca\RenewalValidityPeriod=Years
certutil -setreg ca\RenewalValidityPeriodUnits=100
net stop certsvc & net start certsvc

You can verify the settings by substituting "-getreg" for "-setreg"

After that, you can use the 'certutil -renew reusekeys' command to renew the certificate.
 

Microsoft Certifcate Server

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).