Certificate renewal with usb token

[Joel proal]

Hi,

Do you know how to renew a certificate stored on a usb token (ikey) I
dont find any information about it. I generated them with Windows 2000
enterprise CA. It is a Smart Card User certificate.
First I tried to change the valididy but it seem impossible with a
enterprise CA.

Thanks,

Joel Proal

 

[David Cross [MS]]

This is now possible with a Windows Server 2003 CA.


http://www.microsoft.com/windowsxp/pro/techinfo/planning/pkiwinxp/default.asp

Cert templates -
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/deploy/confeat/ws03crtm.asp

 

[Joel proal]

Hi,

Thanks for your answer. You are right Windows 2003 seems beter with the
administration of certificate and token. Maybe for future certificates...

I find a workaround to extend the validity of certificate but I don't
think it is a good one.
I launched adsiedit and modified the attribut for the template in
Condiguration -> Services->Public Key Services -> Certificate Template
-> SmartcardUser
The attribut is pKIExpirationPeriod

The probleme is that the date is coded:
00 80 72 0E 5D C2 FD FF is 2 years
00 40 39 87 2E E1 FE FF is 1 year

For more I don't know so I put the same as for may CA template.

I works but I don't know if I will have any side effect.

Next step would be to find the way the date is coded ( it must be ASN or
BER or things like that)

If you have any idea...


Joel Proal