Add Template Support for Custom Policy Module for Enterprise CA
Hi all, I hope, I'm in the right community hub here. We are developing a custom policy module which should do nothing else than change adapt some values given by the CSR for a set of given templates. Despite we did quite an amount of research we weren't able to find more than the Microsoft Documentation and the sample (also provided by MS) here: https://github.com/microsoft/Windows-classic-samples/tree/main/Samples/Win7Samples/security/certificateservices/policy/c%2B%2B/WindowsServer2008R2 So, the required functionality can easily be implemented, BUT This sample has no security enabled and does not respect the settings given by the template. E.g. if the template says that a certificate should be valid for 1 year the CA still issues certificates that are valid for 2 years. Is there somewhere any source code available which is suitable for an Enterprise CA that we could take as a base or any other hint where to look for apart from the usual MS Docu which is not very extensive in that respect? Any hints or help would be greatly appreciated.
Certificate Enrollment Policy
Hello I have a question about Certificate Enrollment Policies. I am seeing two different policies on two different computers and not sure why. Both users are logged into the same domain but when I go to request a certificate from UserA using the certmgr.msc console I see "Configured by your Administrator" Active Directory Enrollment Policy ID: xxxxx-xxxx-xxxx etc.. on one computer and am able to see certificate templates listed. When I log on as UserB on a different computer using certmgr.msc console I see "Configured by your Administrator" Active Directory Enrollment Policy ID: yyyyyy-yyyyyy-yyyyy etc.. and I don't see ANY certificate templates listed. Both users and the computers they are logging into are on the same domain but receiving two different Enrollment Policy ID's. Could someone help me out on why that would be? It is driving me crazy and need to figure this out so I can request certificates using the certmgr.msc Thanks in advance!!