About

Extend the internal PKI certificate validity period on Windows Server 2022 CA. Currently, all issued certificates expire on February 1, 2026; extend this to February 1, 2028. Review existing CA and certificate templates for validity settings. Update template validity from 1 year to 3 years and republish templates. Verify CA root and issuing certificate validity supports the change. Issue and test new certificates to confirm extended expiration. Update Group Policy or auto-enrollment if required. Document all configuration changes and test results.