Hi Is it possible to specify Not valid before and Not after values with Certreq.exe? Kind regards Mikca11

no, these values are set by CA during certificate signing process.My weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com Windows PKI reference: on TechNet wiki

Hi Vadmims Thanks for the answer. Is there a way to get the same Not after value? E.g 1 year = Certificate enrollment to a device with Not after value 10 year in the future. 2 year= Certificat Renewal to the same device with the same Not after value as the first certificate. Kind regards Mikca11

Can you explain your task?My weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com Windows PKI reference: on TechNet wiki

We want to issue certificates to vehicles and we want the certificates to have the same end date. The end date should be the same even if reissue a brand new certificate incase the vehicles HeadUnit is damaged and has to be replaced. How can i achieve this? I hope this explained. Kind regards Mikca11

I doubt that it is possible. This is because CA calculates validity on "how long valid", not "until to" basis.My weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com Windows PKI reference: on TechNet wiki

Thanks Vadmims.

no, these values are set by CA during certificate signing process.My weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com Windows PKI reference: on TechNet wiki