question

rahulsharma-04 avatar image
1 Vote"
rahulsharma-04 asked RoyLi-MSFT edited

Configure Network Device Enrollment Service for Windows Server 2016 with Custom Certificates using standalone sub-coordinate CA

Hi All,

We have two standalone CA Server in our premises

  1. ROOT-CA

  2. Sub-coordinate CA

The standalone sub-coordinate CA server is installed and configured by using below article

https://windowstechpro.com/how-to-install-subordiante-ca-in-windows-server-2012-r2/

Root-CA server certificate valid till - 2/25/2044

Sub-coordinate server certificate valid till - 2/25/2044

On Sub-Coordinate CA server we installed NDES "Network Device Enrollment Service" and it created two certificate which is valid till 4/16/2021

7532-cep-certificate.jpg



The network devices which get the certificate from Sub-coordinate CA has the same validity

7462-device-cert.jpg

Is there any way where we can use custom certificate template for NDES certificate and configure their extend it's validity

Appreciate some help..


not-supported
cep-certificate.jpg (19.1 KiB)
device-cert.jpg (18.1 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

LeonLaude avatar image
0 Votes"
LeonLaude answered

Hi,

Q&A currently supports the products listed in right-hand pane (more to be added later on).

You can reach the experts in the dedicated Windows Server security forum over here:
https://social.technet.microsoft.com/Forums/en-US/home?forum=winserversecurity

(please don't forget to mark helpful replies as answer)

Best regards,
Leon


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.