Automatically populated subject fields in certificate
Hi,I'd like to issue certificates with following subject structure:RSA_unstructName "1.2.840.113549.1.9.2"= some string,CN=commonName http://technet.microsoft.com/en-us/library/cc772812(WS.10).aspx states that RSA_unstructName is supported as part of DN in subject. The problem is that I would like to issue these certificates automatically based on information that is stored in Active Directory.I've added unstructuredName as an optional attribute in user object and populated it for a test user. I've set SubjectTemplate registry setting to include unstructuredName in DN and tried to issue a test certificate.Unfortunately the certificate doesn't contain the right subject as it omits the unstructuredName data from Active Directory. I guess this is because the policy module doesn't populate the field? I suspect this because http://msdn.microsoft.com/en-us/library/cc226548(PROT.10).aspx mentions only email, DNS, CN or DN. Am I right?If I use FIM certificate management with certificate subject module I'm able to add any attribute in AD into subject. Unfortunatelly it will be a part of CN, I would like to know if it is possible to add it as a separate component e.g.1.2.840.113549.1.9.2=some string,CN=User common nameBest regardsMartin Rublik
February 5th, 2010 5:12pm


