Forum Discussion

Dave101's avatar
Dave101
Copper Contributor
Oct 16, 2020

Certificate Templates Question

Hello all, I hope this will be an easy question. OS: Windows Server 2016 Standard Running a Windows Certificate Authority.   Scenario: We have had a duplicate of the standard "Client Server Auth...
  • BenKrah's avatar
    Oct 16, 2020

    Hi Dave101,

     

    if you update any property of a certificate template it will be effective for NEW enrollments from this point on (depends a bit on DC replication because the change has to be replicated throughout the domain).

     

    However, existing certificates on systems that have already enrolled a certificate based on this template will not be affected. They will be able to use the certificate until it expires.

     

    At one customer I additionally had to remove the certificate template from the CA configuration and re-add it (New - certificate template to issue; not the template itself!). But from my point of view this should not be necessary.

Resources