How do I create a self-signed certificate that is valid for more than one year? (NETIQKB50845)

  • 7750845
  • 02-Feb-2007
  • 05-Oct-2011

Environment

Secure Password Administrator 1.0

Situation

How do I create a self-signed certificate that is valid for more than one year?

How do I modify the expiration date for a certificate in the sslkey batch file utility?

Can I change the default timeframe when a self-signed certificate is valid?

Resolution

When you create a self-signed certificate using the Secure Password Administrator sslkey batch file utility, the default timeframe for the certificate is 360 days. The utility does not prompt you to provide any other value, but you can modify the default value.

To modify the expiration date of a self-signed certificate:

  1. In the C:\Program Files\NetIQ\SPA\bin folder, run the sslkey.bat file.
  2. Locate the following statement in the file:set op=%op -validity 360
  3. Replace the 360 value with the appropriate value representing the number of days until the expiration date.


Additional Information

Formerly known as NETIQKB50845