Our Win2k3 CA is set to expire at the end of December. I want to extend it for a bit, as well as the all the active certificates its issued to servers on our LAN. Is it really as simple as this? http://technet.microsoft.com/en-us/library/cc780374(WS.10).aspx Has anyone tried this before? Any "gotchas" i should look out for? Thanks! *If i'm in the wrong group, kindly point me in the right direction. :)

Hope my article will be helpfull for you: Root CA certificate renewalhttp://en-us.sysadmins.lv

So it really IS that simple?

my answer is YES.http://en-us.sysadmins.lv