PSPKI icon indicating copy to clipboard operation
PSPKI copied to clipboard

Add/Set-CertificateTemplate allows setting Autoenroll permission to V1 templates

Open Crypt32 opened this issue 3 years ago • 0 comments

V1 templates allow only these permissions: -Full Control

  • Read
  • Write
  • Enroll

Currently, we do not check for template version and can enable Autoenroll right on V1 template, which is wrong.

Crypt32 avatar Nov 05 '20 16:11 Crypt32