PIV Certificate Renewal Process

2017-04-22T18:46:43+01:00

The YubiKey PIV currently does not support self-service renewal of existing certificates against a Windows Server CA (signing the request with the old certificate). This makes the PIV functionality hardly usable in corporate environments, e.g. for smart card logon.
Although the built-in Windows GUI (certmgr.msc) has this functionality, it sees YubiKey PIV as read-only, so this functionality cannot be used.

Statistics: Posted by michaelg — Sat Apr 22, 2017 6:46 pm

Yubico Forum

PIV Certificate Renewal Process