 This information is written in English only
The certificate issued for SmartCard Logon.  Image Removed Image Added
| Explanations | Screenshots |
|---|
General: - Validity = 3 years
- Renewal Period = 6 weeks
- Published in Active Directory
We can see certificate issued under user account properties in AD |
Image Removed Image Added
| Compatability: Default setting
|  Image Added
| Request Handling: - Purpose = Signature and SmartCard Logon
|
Key Size =1024- Prompt the User during enrollment =
|
setCSP = Any – the organization can choose its own CSP or Buypass Access (Net iD CSP) Image Removed | Image Removed |
|  Image Added
| Cryptography: - Key Size = 1024
- Requests can use any provider available on the subject’s computer
|  Image Added
| Key Attestation: Default setting |  Image Added
| Subject Name: Name is obtained from Active Directory based on the Fully distinguished name and the user's UPN |
Image Removed |  Image Added
| Issuance Requirements: - This number of authorized signatures = 1
- Policy = Application Policy and Certificate Request Agent
- Reenrollment = Same criteria as for enrollment
|
Image Removed Image Added
| Suspended Templates: |
Image Removed Image Added | Extensions: |
Policy = Client Authentication, SmartCard Logon Image Removed- policies = Smart card Logon, Client Authentication
|  Image Added
| Extensions: - Basic Constraints = Default settings
|  Image Added
| Extensions: - Certificate Template Information = Default Setting
|  Image Added
| Extensions: - Issuance Policies = Default
|
setting (Certificate policies are also known as issuance policies) Image Removed |  Image Added
| Extensions: |
UsageDigital SignatureCritical extension Image Removed | - usage: Digital signature – Critical extension
|  Image Added
| Security: These settings determine the privileges for the Certificate for read, modify and enroll of certificate. Only the DL_CA_ADM, the DL_LRA_ADM and the DL_CA_LRA |
_Operators auto Enrollment.Authenticated Users = ReadEnroll. - DL_CA_Admins = Read, Write, Enroll
- DL_CA_LRA_Admins = Read, Write,
|
- Enroll
- DL_CA_LRA_Operators = Read, Enroll
|
Domain Admins = Read, WriteEnterprise Admins = Read, Write Image Removed |
|  Image Added
| Server: Default settings |  Image Added
|
|