We have a two-tier CA infrastructure with an offline root CA and an Enterprise Sub CA with Automatic Enrollment setup on Windows Server 2003. Unfortunately, I must have got my dates mixed up because the SubCA certificate for our Enterprise Sub CA expired. I have now issued a new cert for it from the Root CA. However, it does not appear that the Ent Sub CA is issuing certs to the computers in the domain automatically any more. There are a large number (and growing) of Pending Requests. I can issue the certs manually and that appears to be working fine - once the computer reboots, it is picking up the new cert. How long should it take for these pending requests to be handled? What needs to be done to get everything working properly again?Please let me know if you need any additional info.P.S. If anyone has a good resource for reading up on configuring and managing CAs, please pass that along.