Configure Network Device Enrollment Service for Windows Server 2016 with Custom Certificates using standalone sub-coordinate CA

Rahul Sharma 26 Reputation points
2020-04-16T19:09:49.263+00:00

Hi All,

We have two standalone CA Server in our premises

  1. ROOT-CA
  2. Sub-coordinate CA

The standalone sub-coordinate CA server is installed and configured by using below article

https://windowstechpro.com/how-to-install-subordiante-ca-in-windows-server-2012-r2/

Root-CA server certificate valid till - 2/25/2044

Sub-coordinate server certificate valid till - 2/25/2044

On Sub-Coordinate CA server we installed NDES "Network Device Enrollment Service" and it created two certificate which is valid till 4/16/2021

7532-cep-certificate.jpg

The network devices which get the certificate from Sub-coordinate CA has the same validity

7462-device-cert.jpg

Is there any way where we can use custom certificate template for NDES certificate and configure their extend it's validity

Appreciate some help..

Not Monitored
Not Monitored
Tag not monitored by Microsoft.
37,797 questions
0 comments No comments
{count} vote

Accepted answer
  1. Leon Laude 85,726 Reputation points
    2020-04-17T00:11:32.477+00:00

    Hi,

    Q&A currently supports the products listed in right-hand pane (more to be added later on).

    You can reach the experts in the dedicated Windows Server security forum over here:
    https://social.technet.microsoft.com/Forums/en-US/home?forum=winserversecurity

    (please don't forget to mark helpful replies as answer)

    Best regards,
    Leon

    0 comments No comments

0 additional answers

Sort by: Most helpful