Question : Renew Subordinate CA for more than a year?

We are trying to renew the subordinate CA certificate from our root (root has a 20 year certificate expiration), but we cannot renew for more than a year. We want 5 year certificate on the subordinate.
We tried:
certutil -setreg ca\RenewalValidityPeriodUnits 5
certutil -setreg ca\ValidityPeriodUnits 5
on both the root and the subordinate, and when we issue from the root, we see the expiration is still only 1 year from the current date.
We're following this procedure: http://msdn.microsoft.com/en-us/library/cc962077.aspx
We are running enterprise version of Windows 2003 on both root and subordinate.
How do we get a 5-year certificate renewal on our subordinate from the root?

Answer : Renew Subordinate CA for more than a year?

you have to make changes to your server's registry,

http://technet.microsoft.com/en-us/library/cc962064.aspx
Random Solutions  
 
programming4us programming4us