ADCSTemplate
ADCSTemplate copied to clipboard
Certificate template revision numbers should be updated
When exporting certificate template, it is considered a duplicate and revision number should not be exported as is, instead, they shall be updated as follows:
-- Revision
DS attribute is set to 100.
-- msPKI-Template-Minor-Revision
DS attribute is incremented by 1.
Depending on desired template schema version, msPKI-Template-Schema-Version
attribute must be set to either, 2, 3 or 4. This should be is user-provided value.
This is because you shall not import V1 (msPKI-Template-Minor-Revision=1
) certificate templates. Only custom templates can be imported.