Class EnrollmentFlagsV4

    • Method Detail

      • enableKeyReuseOnNtTokenKeysetStorageFull

        public final Boolean enableKeyReuseOnNtTokenKeysetStorageFull()

        Allow renewal using the same key.

        Returns:
        Allow renewal using the same key.
      • includeSymmetricAlgorithms

        public final Boolean includeSymmetricAlgorithms()

        Include symmetric algorithms allowed by the subject.

        Returns:
        Include symmetric algorithms allowed by the subject.
      • noSecurityExtension

        public final Boolean noSecurityExtension()

        This flag instructs the CA to not include the security extension szOID_NTDS_CA_SECURITY_EXT (OID:1.3.6.1.4.1.311.25.2), as specified in [MS-WCCE] sections 2.2.2.7.7.4 and 3.2.2.6.2.1.4.5.9, in the issued certificate. This addresses a Windows Kerberos elevation-of-privilege vulnerability.

        Returns:
        This flag instructs the CA to not include the security extension szOID_NTDS_CA_SECURITY_EXT (OID:1.3.6.1.4.1.311.25.2), as specified in [MS-WCCE] sections 2.2.2.7.7.4 and 3.2.2.6.2.1.4.5.9, in the issued certificate. This addresses a Windows Kerberos elevation-of-privilege vulnerability.
      • removeInvalidCertificateFromPersonalStore

        public final Boolean removeInvalidCertificateFromPersonalStore()

        Delete expired or revoked certificates instead of archiving them.

        Returns:
        Delete expired or revoked certificates instead of archiving them.
      • userInteractionRequired

        public final Boolean userInteractionRequired()

        Require user interaction when the subject is enrolled and the private key associated with the certificate is used.

        Returns:
        Require user interaction when the subject is enrolled and the private key associated with the certificate is used.
      • hashCode

        public final int hashCode()
        Overrides:
        hashCode in class Object
      • equals

        public final boolean equals​(Object obj)
        Overrides:
        equals in class Object
      • toString

        public final String toString()
        Returns a string representation of this object. This is useful for testing and debugging. Sensitive data will be redacted from this string using a placeholder value.
        Overrides:
        toString in class Object
      • getValueForField

        public final <T> Optional<T> getValueForField​(String fieldName,
                                                      Class<T> clazz)