Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have an environment of Windows Server 2003 machines that are running ADAM (Active Directory Application Mode) over SSL. The SSL certificates that are installed on the machines are created using our internal CA and are trusted on any computer on our domain.

The problem is that they expire. Is there a way that I can configure the server or certificate services to enable these certificates to renew themselves or get renewed in an automated fashion?

share|improve this question

I do not know a way to do this, but I thought I would chime in. Why not to create the certificates to expire 20 years (random number here, could be less, or more) after creation instead?

share|improve this answer

I don't think there's a way to auto-renew certs. Are you in control of the CA? I think about the best you can do is get a cert that has an expiration way out in the future. This might be a problem, though, if you don't control the CA.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.