I set ForceUTF8 in my CaPolicy.inf and that didn't change my ISIS MTT configuration, in other words I *still* had to run this obscure command:

;PS C:\Windows> certutil -setreg ca\forceteletex +0x20
;SYSTEM\CurrentControlSet\Services\CertSvc\Configuration\Secure Email Root v1\For
;ceTeletex:
;
;Old Value:
; ForceTeletex REG_DWORD = 12 (18)
; ENUM_TELETEX_AUTO -- 2
; ENUM_TELETEX_UTF8 -- 10 (16)

;New Value:
; ForceTeletex REG_DWORD = 32 (50)
; ENUM_TELETEX_AUTO -- 2
; ENUM_TELETEX_UTF8 -- 10 (16)
; ENUM_TELETEX_FORCEUTF8 -- 20 (32)


What is the difference and when should I use each setting?

There is an amazing pack of free network admin tools. click here to download it

Hello,

Thank you for your post.

This is a quick note to let you know that we are performing research on this issue.

Best Regards
Elytis Cheng
Elytis Cheng
TechNet Community Support

Need to support users over the internet? click here try our remote control online beta

Hello,

Thank you for your post.

This is a quick note to let you know that we are performing research on this issue.

Best Regards
Elytis Cheng
Elytis Cheng
TechNet Community Support

Need to support users over the internet? click here try our remote control online beta

ForceUTF8 changes the default encoding of relative distinguished names (RDNs) in Subject and Issuer distinguished names to UTF-8. Only those RDNs that support UTF-8, such as those that are defined as Directory String types by an RFC, are
affected. For example, the RDN for Domain Component (DC) supports encoding as either IA5 or UTF-8, while the Country RDN (C) only supports encoding as a Printable String. The
ForceUTF8 directive will therefore affect a DC RDN but will not affect a C RDN.
command "certutil -setreg ca\forceteletex +0x20" Enforce UTF8 encoding. After you configure a CA to force UTF8 encoding, the UTF8 setting applies to all certificates that are issued with this CA. At the CA that must issue ISIS-MTT-compliant
certificatesPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

There is an amazing pack of free network admin tools. click here to download it

ForceUTF8 changes the default encoding of relative distinguished names (RDNs) in Subject and Issuer distinguished names to UTF-8. Only those RDNs that support UTF-8, such as those that are defined as Directory String types by an RFC, are
affected. For example, the RDN for Domain Component (DC) supports encoding as either IA5 or UTF-8, while the Country RDN (C) only supports encoding as a Printable String. The
ForceUTF8 directive will therefore affect a DC RDN but will not affect a C RDN.
command "certutil -setreg ca\forceteletex +0x20" Enforce UTF8 encoding. After you configure a CA to force UTF8 encoding, the UTF8 setting applies to all certificates that are issued with this CA. At the CA that must issue ISIS-MTT-compliant
certificatesPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

There is an amazing pack of free network admin tools. click here to download it