Skip to main content

Certificates from Active Directory Certificate Service Will Expire on May 18, 2021

Related services: Identity Management

Digital certificates that are provided through Active Directory Certificate Service (AD CS) will expire on May 18, 2021. Service administrators should be sure to obtain new certificates before this date.

In addition, we want to let you know that there is a new AD CS infrastructure—read below for details.

New AD CS Infrastructure

The new AD CS infrastructure is live, running in Windows Server 2019 and integrated with Active Directory. If you have been using certificates from the current service, please renew your certificates from the new service.

New certificate templates are now available in Active Directory Enrollment Policy. A list of available templates can be seen at Active Directory Certificate Services Infrastructure.

Configuration Manager client authentication certificates are already being updated. Details about that process have been provided in a separate communication.


If you have questions, please contact Muhammad Arif at

Identity Management  
Cornell Information Technologies  

Was this page helpful?

Your feedback helps improve the site.