I set up a Stand Alone Root CA, using Windows 2003 standard, that is not in an Active Directory or Domain. When I create a certificate the default valid to date is always to one year from the creation date. How can I change the valid to date and create certificates with a longer life span than one year.

This should be possible through aregistry hack: CAXchgValidityPeriodUnits For more info see the following link: http://technet2.microsoft.com/WindowsServer/en/library/7fe116af-971b-44d3-809e-00606c080a191033.mspx?mfr=true