Re: CA certificate template custom subject name format



In article <O88B7CfRHHA.3592@xxxxxxxxxxxxxxxxxxxx>, Ragnar@xxxxxxxxxxxxxxx says...
Thanks for your reply!

I'm looking for using the samaccountname in the subject field instead of
none, common name for fully distinguished name.

/Ragnar


"Brian Komar [MVP]" <bkomar@xxxxxxxxxxxxxxxxx> wrote in message
news:MPG.2016b73394db601f98972f@xxxxxxxxxxxxxxxxxxxxxxx
In article <691FE282-D2C7-417B-A8D8-8FEA345FD22E@xxxxxxxxxxxxx>,
Ragnar@xxxxxxxxxxxxxxx
says...
Hi

I'm in a situation where I need to enroll certificates automatically
(autoenrollment) using Active Directory Group Policies. The environment
is
running Windows Server 2003 SP1, enterprise sub-CA.

My question is, is it possible to use a different "subject name format"
than
the options available on a V2 certificate template (Common name, Fully
distinguished name, none)?

Thank you.


Regards,
Ragnar


Not through the standard certificate template interface.
Certificate Lifecycle Manager provides this ability through its Subject
Name Plug-in Policy
Module.
What name format are you after?
Brian


Yes, that could be done. Of course, not sure what you would use it for after that...
Brian
.



Relevant Pages

  • Re: CA certificate template custom subject name format
    ... I'm looking for using the samaccountname in the subject field instead of none, common name for fully distinguished name. ... is it possible to use a different "subject name format" than ... Not through the standard certificate template interface. ...
    (microsoft.public.windows.server.security)
  • Re: DCOM error with NTBACKUP and Certificate Services
    ... >> Hi Brian ... > subordinate CAs, then you must only publish the Subordinate ... > Certification Authority certificate template at the online root CA. ...
    (microsoft.public.win2000.security)
  • Re: Why enterprise root CA automatically isue certificates.
    ... >> Thaks Brian, but that procedure only works in a standalone CA. ... >> Enterprise CA the optios is disabled, is ther a way to enable it? ... > the enrollment decision based on the DACL on the certificate template. ... > With Windows 2000, the option is not available, as you have seen. ...
    (microsoft.public.win2000.security)