Add extension key usage to a template
Hi all, I would like to add to a template the following key usage extension : certificate signing and CRL signing. Thes 2 options are unavailabe (in grey). I use an AD 2008 R2 integrated CA on a Windows 2008 R2. Thanks in advance
May 11th, 2011 5:42pm

You should duplicate existing Subordinate Certification Authority template. This and Root Certification Authority templates are the only templates that issues certificates to CA servers (Basic constraints = CA). These flags (certificate signing and CRL signing) are available for CA certificates only. Since other templates are issued to an end entity these flags are restricted.My weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com
Free Windows Admin Tool Kit Click here and download it now
May 11th, 2011 6:32pm

You should duplicate existing Subordinate Certification Authority template. This and Root Certification Authority templates are the only templates that issues certificates to CA servers (Basic constraints = CA). These flags (certificate signing and CRL signing) are available for CA certificates only. Since other templates are issued to an end entity these flags are restricted. My weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com
June 16th, 2011 4:57pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics