Renewal root certificate authority

[Guest NICO Rodriguez Sanchez]

The question is simple, but I don't find any article that answers it.

If I renew the root certificate authority (that ends on December 2009), what

will happen with the certificates emited before by this root certificate

authority (they end also in December 2009)? Will they continue working

(theoretically they continue being valid)? or Must I force the renewal of all

of the user certificates (because the root is updated).

 

Thank you very much for your support.

 

More Details if you want:

8:52:03 Nicolas

Pregunta inicial/Comentarios: Renewal root certificate authority, what

happens to user certificates created before?

8:52:29 Ice Lee

Thank you for contacting the TechNet Online Concierge, Nicolas. Please give

me a moment while I review your question.

8:53:19 Ice Lee

May I have more details about your question?

8:53:44 Nicolas

hello, we have a root certificate authority which ends en 14 december 2009

8:54:02 Nicolas

and we have user certificates created than end on the same date

8:54:28 Nicolas

so I would like to renew the root certificate for 3 years and

8:54:40 Nicolas

my answer is

8:55:24 Nicolas

what happens with all the valid certificates that I have now? Will they

continue being valid? Until when?

8:56:11 Ice Lee

Thanks for the details, Nicolas. Please understand we are not technical

specialists. As Online Concierge, I'll try my best to help you locate any

relevant documents and articles. If I cannot find anything helpful, I'll

offer other support options for you, is this okay?

8:57:04 Nicolas

Can I continue using the client certificates until December and renew them

for example on november with the new end date?

8:58:05 Ice Lee

I understand your concern. Please give me one moment to check this for you.

8:58:56 Nicolas

My concern is the following: If I renew the root certificate today, will the

user certificates continue working?

8:59:12 Nicolas

Or should I renew all of them today?

8:59:45 Nicolas

Or I have time until december to renew them?

9:01:36 Ice Lee

May I know why you need to renew your root certificate authority today since

it ends on 4 December 2009?

9:03:35 Nicolas

Because the user certificates have a life of 1 year by default, but when I

renew them the end date is on december (less than one year) and the users are

remote users and I see them to renew the certificates a few times , for

example tomorrow

9:04:46 Nicolas

I would like to have valid certificates for a hole year, not by a few months

9:05:12 Nicolas

that is why I want to renew the root certificate for 3 years more

9:05:23 Ice Lee

I see...

9:06:12 Nicolas

so that when I renew the cliente certificates tomorrow they have a valid

date until 06 march 2010 and not until 14 december 2009

9:07:05 Ice Lee

I got you now. Thanks for your explanation.

9:07:29 Nicolas

Thank you for your time

9:08:41 Ice Lee

I haven't located a confirmed answer to your question at this moment but you

may want to take a look at the following general article:

Renewing a certification authority

http://technet.microsoft.com/en-us/library/cc740209.aspx

9:09:26 Nicolas

Tomorrow I will only renew 14 certificates, but I have more than 100, so my

concern is about the 86 certificates than I won't renew by thees days

9:09:55 Nicolas

Will they continue working? Until 14 december 2009?

9:10:37 Nicolas

I believe that they will continue working, but I don't find it in any article

9:11:59 Nicolas

I read the web page but I didnt see the answer to my concern

9:12:21 Ice Lee

Nicolas, I'm afraid I had no luck locating the confirmed information. I'd

recommend you to post this question to TechNet Managed Newsgroup where you

may get guarenteed response from our support engineer.

9:12:56 Ice Lee

You may post this question to:

TechNet Managed Newsgroups

http://technet.microsoft.com/en-us/subscri...7.aspx#security

"microsoft.public.security"

9:13:46 Ice Lee

I'll send you an e-mail explaining how to configure TechNet Managed

Newsgroup to get guaranteed response from our support engineers. May I send

it to your email address?

9:14:00 Nicolas

Yes, thank you!

9:14:35 Ice Lee

My pleasure. I'm sorry for not being able to give you any confirmed

information. May I know if there is anything else I could help you with at

this moment?

9:14:53 Nicolas

How long does it take to have an answer in this forum?

9:15:21 Ice Lee

The guarenteed response is within 1 business day.

9:15:39 Nicolas

Thank you for your support

9:16:09 Ice Lee

Always a pleasure. Have a nice day and take care, Nicolas.