ADCSTemplate icon indicating copy to clipboard operation
ADCSTemplate copied to clipboard

Certificate template revision numbers should be updated

Open Crypt32 opened this issue 6 years ago • 0 comments

When exporting certificate template, it is considered a duplicate and revision number should not be exported as is, instead, they shall be updated as follows:

-- Revision DS attribute is set to 100. -- msPKI-Template-Minor-Revision DS attribute is incremented by 1.

Depending on desired template schema version, msPKI-Template-Schema-Version attribute must be set to either, 2, 3 or 4. This should be is user-provided value.

This is because you shall not import V1 (msPKI-Template-Minor-Revision=1) certificate templates. Only custom templates can be imported.

Crypt32 avatar Mar 29 '18 06:03 Crypt32