Digital certificates that are provided through Active Directory Certificate Service (AD CS) will expire on May 18, 2021. Service administrators should be sure to obtain new certificates before this date.

In addition, we want to let you know that there is a new AD CS infrastructure—read below for details.

New AD CS Infrastructure

The new AD CS infrastructure is live, running in Windows Server 2019 and integrated with Active Directory. If you have been using certificates from the current service, please renew your certificates from the new service.

New certificate templates are now available in Active Directory Enrollment Policy. A list of available templates can be seen at Active Directory Certificate Services Infrastructure.

Configuration Manager client authentication certificates are already being updated. Details about that process have been provided in a separate communication.

Questions

If you have questions, please contact Muhammad Arif at mna1@cornell.edu.

Identity Management  
Cornell Information Technologies