Unless I misunderstand what you are asking, you just right click your CA in the MMC, "All Tasks", "Renew CA Certificate". You'll see the new certificate show up when you look at the properties of your CA.
As to whether the certificates that have been issued will automatically renew, that depends on the client. Certs that were issued because of autoenrollment will automatically renew. I *think* computer and user certs that were issued to users and computers (such as IIS servers) in the same domain as the CA will auto renew. Certs that were issued manually and used out of the domain (like in a DMZ), or in a non-MS application (Apache, java, etc) will not auto renew. From: [email protected] [mailto:[email protected]] On Behalf Of Tammy George Sent: Thursday, August 15, 2013 10:51 AM To: '[email protected]' Subject: [NTSysADM] Certificate Authority expiration/renewal Hi all. Our Certificate server was setup by someone who is no longer here. The CA is due to expire so we're looking at renewing it. I've found docs on renewing the CA (http://technet.microsoft.com/en-us/library/cc962077.aspx) which seem pretty straightforward. What I'm wondering is - when I renew this CA (ABC-CA), will the various certificates listed under 'Certificates' in the MMC also be renewed (i.e. the ones that are issued by ABC-CA)? Also, users' issued certificates are due to expire on August 26 at 3pm. What will happen from a user's prospective? Thanks much! - Tammy
