Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
The following processing rules are applied to flags in the Certificate.Template.msPKI-Enrollment-Flag datum.
|
Flag |
Client processing |
|---|---|
|
0x00000001 |
CT_FLAG_INCLUDE_SYMMETRIC_ALGORITHMS The client MUST include a Secure/Multipurpose Internet Mail Extensions (S/MIME), as specified in [RFC4262], in the request. Note that although the flag contains the words "SYMMETRIC ALGORITHMS" as part of its name, it specifies only S/MIME extensions. |
|
0x00008000 |
CT_FLAG_INCLUDE_BASIC_CONSTRAINTS_FOR_EE_CERTS If this flag is set, the client SHOULD add a Basic Constraints extension (as specified in [RFC3280], section 4.2.1.10) to the certificate request and set the cA field to FALSE. The client SHOULD NOT include the pathLenConstraint field in the Basic Constraints extension. <56> |