[Pki-users] CA Validity

Hi All Am new to the Dogtag Cert server. Am testing it out for my company. Please I need direction on how to change the number of years of validity for the Security Domain Certificate Authority Certificate. After the installation and setup I found the CA Signing Certificate has only 2 years validity. Even after trying to change it through the profile and re-running the setup I still ended up with 720 days certificate. Can anybody help and point me in the right the direction. Thanks in advance for your help. Ide