How to Extend the Certificate Expiration period in Operations Manager 2007


imageBy default when we request a certificate in System Center Operations Manager 2007, the validity period is 1 year. When the certificate is about to expire you will receive a warning message on the RMS stating that the certificate on the RMS server is due to expire. To avoid and to extend the certificated expiration date you can perform the following steps:

1)    Create a new text file named CApolicy.inf and copy the lines below into it.  Once you save the file, copy it to the C:\Windows directory of the CA.

[Version]
Signature= "$Windows NT$"
[Certsrv_Server]
RenewalKeyLength=4096
RenewalValidityPeriod=Years
RenewalValidityPeriodUnits=15
[CRLDistributionPoint]
[AuthorityInformationAccess]

2)    On the line above there is a field called ‘RenewalValidityPeriodUnits’. This is used for the validity period. In this example, we are using the validity as 15 years. You can choose a value according to your needs.

3)    Edit the following registry value to 15 (matching the value used above):

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CertSvc\Configuration\<CAName>\ValidityPeriodUnits

4)    Go to the Certificate Authority and highlight the server name.

5)    Right click and go to All Tasks.

6)    At the bottom is the option to renew the CA certificate. This will ask you to stop the Certificate Services. Select Yes.

7)    This brings up a dialog box with the option to generate a new public and private key. Select Yes. It will now start the Certificate Services and your CA certificate will be renewed.

8)    Go to start, run and type in MMC. Go to the console and highlight Add/Remove Snap-in.

9)    Click on the add button, then choose the Certificates snap-in. Add the snap-in for the Computer Account, hit the next button and select the local computer and hit finish.

10)    You should now have the console open for the certificates for the local computer.  Expand the personal certificates which will tell you the extended expiration date of the certificate.  Now whenever you request a new certificate it will be valid for the period you specified above.

For more information see Installing and configuring a certification authority.

Vikram Sahay

Comments (3)

  1. Dhanraj K says:

    Hi,

    There are a few questions i would like to ask,

    Do we perform step 1 on the CA ?

    Also I am unable to find the exact path of the CA installation. Can you give me a sample path that is applicable in your case .

    Thanks,

    Dhanraj

  2. show box says:

    Thanks for the great info. I really loved this. I would like to apprentice at the same time as you amend your web site, how could i subscribe for a blog site?
    For more info on showbox please refer below sites:
    http://showboxandroids.com/showbox-apk/
    http://showboxappandroid.com/
    Latest version of Showbox App download for all android smart phones and tablets.
    http://movieboxappdownloads.com/ – It’s just 2 MB file you can easily get it on your android device without much trouble. Showbox app was well designed application for android to watch movies and TV shows, Cartoons and many more such things on your smartphone.
    For showbox on iOS (iPhone/iPad), please read below articles:
    http://showboxappk.com/showbox-for-ipad-download/
    http://showboxappk.com/showbox-for-iphone/
    Showbox for PC articles:
    http://showboxandroids.com/showbox-for-pc/
    http://showboxappandroid.com/showbox-for-pc-download/
    http://showboxforpcs.com/
    There are countless for PC clients as it is essentially easy to understand, simple to introduce, gives continuous administration, effectively reasonable. it is accessible at completely free of expense i.e., there will be no establishment charges and after establishment
    it doesn’t charge cash for watching films and recordings.
    http://www.showboxforipad.org/showbox-apk/ Not simply watching, it likewise offers alternative to download recordings and motion pictures. The accompanying are the strides that are to be taken after to introduce Showbox application on Android. The above
    all else thing to be done is, go to the Security Settings on your Android telephone, Scroll down and tap on ‘Obscure sources’.
    http://www.showboxforipad.org/
    http://movieboxappdownloads.com/moviebox-apk-android/
    http://movieboxappdownloads.com/download-moviebox-pc/
    Movie Box, an esteemed movies application in which you can find stacks of programs and films. The guide is given here to download Movie Box app to Android and to Apple iOS 9.0.2, iOS 8.4/8.3 and also for the lower versions without Jailbreak.
    http://showboxforiphone.org/
    Please do login to Showbox application with the help of Ymail. You can login in Ymail from here –
    http://ymaillogintips.com/
    Sign Up & Do registration for latest movies on Showbox application

  3. arun says:

    Thanks for the great info. I really loved this. I would like to apprentice at the same time as you amend your web site, how could i subscribe for a blog site?

    http://www.movieboxapkdownload.com/ – It’s just 2 MB file you can easily get it on your android device without much trouble. Showbox app was well designed application for android to watch movies and TV shows,
    Cartoons and many more such things on your smartphone.

    Thanks for the great info. I really loved this. I would like to apprentice at the same time as you amend your web site, how could i subscribe for a blog site?

    http://www.aptoideapkdownload.com/ – It’s just 2 MB file you can easily get it on your android device without much trouble.

    http://www.vidmatedownloadapk.com/

    Showbox app was well designed application for android to watch movies and TV shows, Cartoons and many more such things on your smartphone.

    http://www.shareitforpccdownload.com/

    http://www.shareitforpccdownload.com/shareit-for-pc-windows-10-8-1-7-mac-free-download/

    SHAREit for PC lets you transfer files between devices like phones, tablets and computers. With the wide area of sharing compatibility, sharing across anything is easy now. This is the best and the fastest alternative for USB sharing.