Certificate Services CA and certificate duration

I am running Win2003 Server and my root CA is valid for 10 years.

When I request certificates from the server, the duration is always 1 year.
Can I modify the the certificate duration to 2 or 5 years?

> I am running Win2003 Server and my root CA is valid for 10 years.
>
> When I request certificates from the server, the duration is always 1 year.
> Can I modify the the certificate duration to 2 or 5 years?

You can use "Certificate templates" MMC snap in to change properties for
certificate templates. However, some templates are grayed and cannot be
modified (this is templates from w2k CA), but you can use "Duplicate
template" command to create new template and change properties of this one.

Also, after you change templates, you should publish your new templates
in AD. Open CA Services snap in, navigate to certificate templates node.
Select "Manage" command from context menu and check "Publish in Active
directory" option in properties of newly created templates. Also you can
delete templates from AD (use "Delete" item of context menu for templates).



--
With best regards
Nickolay Domukhovsky, MCSA