Renew a certificate with a new key

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To renew a certificate with a new key

Open the Certificates console for the user, computer, or service you want to manage.

Tip

For instructions on creating a Microsoft Management Console (MMC) that allows you to manage the certificates of a user account, computer account, or service account, see the appropriate article from the following list

Confirm that you are in Certificate purpose view. For information on the different view options, see Certificates Console (https://go.microsoft.com/fwlink/?LinkId=209851).
In the console tree, under Personal, click Certificates.
In the details pane, click the certificate you are renewing.
On the Action menu, point to All Tasks, and then click Renew Certificate with New Key to open the Certificate Renewal Wizard.
In the Certificate Renewal Wizard, do one of the following:
- Use the default values to renew the certificate.
- (For advanced users only) Provide your own certificate renewal settings. You need to know the cryptographic service provider (CSP) and the certification authority (CA) issuing the certificate.
  
  You need to select the key length (measured in bits) of the public key associated with the certificate.
  
  You can also choose to enable strong private key protection. Enabling strong private key protection ensures that you are prompted for a password every time the private key is used. This is useful if you want to make sure that the private key is not used without your knowledge.
After the Certificate Renewal Wizard has successfully finished, click OK.

Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.