Configure Network Device Enrollment Service for Windows Server 2016 with Custom Certificates using standalone sub-coordinate CA

Rahul Sharma 26 Reputation points

Hi All,

We have two standalone CA Server in our premises

  1. ROOT-CA
  2. Sub-coordinate CA

The standalone sub-coordinate CA server is installed and configured by using below article

Root-CA server certificate valid till - 2/25/2044

Sub-coordinate server certificate valid till - 2/25/2044

On Sub-Coordinate CA server we installed NDES "Network Device Enrollment Service" and it created two certificate which is valid till 4/16/2021


The network devices which get the certificate from Sub-coordinate CA has the same validity


Is there any way where we can use custom certificate template for NDES certificate and configure their extend it's validity

Appreciate some help..

Not Monitored
Not Monitored
Tag not monitored by Microsoft.
37,192 questions
0 comments No comments
{count} vote

Accepted answer
  1. Leon Laude 85,701 Reputation points


    Q&A currently supports the products listed in right-hand pane (more to be added later on).

    You can reach the experts in the dedicated Windows Server security forum over here:

    (please don't forget to mark helpful replies as answer)

    Best regards,

    0 comments No comments

0 additional answers

Sort by: Most helpful