Interface EnrollmentFlagsV3.Builder

All Superinterfaces:
Buildable, CopyableBuilder<EnrollmentFlagsV3.Builder,EnrollmentFlagsV3>, SdkBuilder<EnrollmentFlagsV3.Builder,EnrollmentFlagsV3>, SdkPojo
Enclosing class:
EnrollmentFlagsV3
public static interface EnrollmentFlagsV3.Builder extends SdkPojo, CopyableBuilder<EnrollmentFlagsV3.Builder,EnrollmentFlagsV3>

  • Method Details

    • enableKeyReuseOnNtTokenKeysetStorageFull

      EnrollmentFlagsV3.Builder enableKeyReuseOnNtTokenKeysetStorageFull(Boolean enableKeyReuseOnNtTokenKeysetStorageFull)

      Allow renewal using the same key.

      Parameters:
      enableKeyReuseOnNtTokenKeysetStorageFull - Allow renewal using the same key.
      Returns:
      Returns a reference to this object so that method calls can be chained together.

    • includeSymmetricAlgorithms

      EnrollmentFlagsV3.Builder includeSymmetricAlgorithms(Boolean includeSymmetricAlgorithms)

      Include symmetric algorithms allowed by the subject.

      Parameters:
      includeSymmetricAlgorithms - Include symmetric algorithms allowed by the subject.
      Returns:
      Returns a reference to this object so that method calls can be chained together.

    • noSecurityExtension

      EnrollmentFlagsV3.Builder noSecurityExtension(Boolean noSecurityExtension)

      This flag instructs the CA to not include the security extension szOID_NTDS_CA_SECURITY_EXT (OID:1.3.6.1.4.1.311.25.2), as specified in [MS-WCCE] sections 2.2.2.7.7.4 and 3.2.2.6.2.1.4.5.9, in the issued certificate. This addresses a Windows Kerberos elevation-of-privilege vulnerability.

      Parameters:
      noSecurityExtension - This flag instructs the CA to not include the security extension szOID_NTDS_CA_SECURITY_EXT (OID:1.3.6.1.4.1.311.25.2), as specified in [MS-WCCE] sections 2.2.2.7.7.4 and 3.2.2.6.2.1.4.5.9, in the issued certificate. This addresses a Windows Kerberos elevation-of-privilege vulnerability.
      Returns:
      Returns a reference to this object so that method calls can be chained together.

    • removeInvalidCertificateFromPersonalStore

      EnrollmentFlagsV3.Builder removeInvalidCertificateFromPersonalStore(Boolean removeInvalidCertificateFromPersonalStore)

      Delete expired or revoked certificates instead of archiving them.

      Parameters:
      removeInvalidCertificateFromPersonalStore - Delete expired or revoked certificates instead of archiving them.
      Returns:
      Returns a reference to this object so that method calls can be chained together.

    • userInteractionRequired

      EnrollmentFlagsV3.Builder userInteractionRequired(Boolean userInteractionRequired)

      Require user interaction when the subject is enrolled and the private key associated with the certificate is used.

      Parameters:
      userInteractionRequired - Require user interaction when the subject is enrolled and the private key associated with the certificate is used.
      Returns:
      Returns a reference to this object so that method calls can be chained together.