Add extension key usage to a template
Hi all,
I would like to add to a template the following key usage extension :
certificate signing and CRL signing.
Thes 2 options are unavailabe (in grey). I use an AD 2008 R2 integrated CA on a Windows 2008 R2.
Thanks in advance
May 11th, 2011 5:42pm
You should duplicate existing Subordinate Certification Authority template. This and Root Certification Authority templates are the only templates that issues certificates to CA servers (Basic constraints = CA). These flags (certificate signing and CRL signing)
are available for CA certificates only. Since other templates are issued to an end entity these flags are restricted.My weblog: http://en-us.sysadmins.lv
PowerShell PKI Module: http://pspki.codeplex.com
Free Windows Admin Tool Kit Click here and download it now
May 11th, 2011 6:32pm
You should duplicate existing Subordinate Certification Authority template. This and Root Certification Authority templates are the only templates that issues certificates to CA servers (Basic constraints = CA). These flags (certificate signing and CRL signing)
are available for CA certificates only. Since other templates are issued to an end entity these flags are restricted.
My weblog: http://en-us.sysadmins.lv
PowerShell PKI Module: http://pspki.codeplex.com
June 16th, 2011 4:57pm