Active Directory Certificate Services renew CA certificate

[Borlukos]

Local Root CA
CA certificate expire 100 years
Provider: Microsoft Software Key Storage Provider
Hash algorithm: SHA1
how to change without changing the certificate!

renew CA certificate
I have created a .ini file and placed it on "C:\Windows\CAPolicy.inf"
[Version]
Signature="$Windows NT$"

[Certsrv_Server]
RenewalValidityPeriod=Years
RenewalValidityPeriodUnits=10

Make certificate renewal.
The validity of the certificate has not changed.
I modified the .ini file "C: \ Windows \ CAPolicy.inf"

[Version]
Signature="$Windows NT$"

[certsrv_server]
RenewalKeyLength=2048
RenewalValidityPeriod=Years
RenewalValidityPeriodUnits=10

Make certificate renewal.
only RenewalKeyLength = 2048 has changed
Tell me what's the problem?

Continue reading...