TemplateV2 - AWS Private CA Connector for Active Directory
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

TemplateV2

v2 template schema that uses Legacy Cryptographic Providers.

Contents

CertificateValidity

Certificate validity describes the validity and renewal periods of a certificate.

Type: CertificateValidity object

Required: Yes

EnrollmentFlags

Enrollment flags describe the enrollment settings for certificates such as using the existing private key and deleting expired or revoked certificates.

Type: EnrollmentFlagsV2 object

Required: Yes

Extensions

Extensions describe the key usage extensions and application policies for a template.

Type: ExtensionsV2 object

Required: Yes

GeneralFlags

General flags describe whether the template is used for computers or users and if the template can be used with autoenrollment.

Type: GeneralFlagsV2 object

Required: Yes

PrivateKeyAttributes

Private key attributes allow you to specify the minimal key length, key spec, and cryptographic providers for the private key of a certificate for v2 templates. V2 templates allow you to use Legacy Cryptographic Service Providers.

Type: PrivateKeyAttributesV2 object

Required: Yes

PrivateKeyFlags

Private key flags for v2 templates specify the client compatibility, if the private key can be exported, and if user input is required when using a private key.

Type: PrivateKeyFlagsV2 object

Required: Yes

SubjectNameFlags

Subject name flags describe the subject name and subject alternate name that is included in a certificate.

Type: SubjectNameFlagsV2 object

Required: Yes

SupersededTemplates

List of templates in Active Directory that are superseded by this template.

Type: Array of strings

Array Members: Minimum number of 1 item. Maximum number of 100 items.

Length Constraints: Minimum length of 1. Maximum length of 64.

Pattern: (?!^\s+$)((?![\x5c'\x2b,;<=>#\x22])([\x20-\x7E]))+

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: