Revision Summary Date Revision History Revision Class Comments 12/18/2006 0.1 New Version 0.1 release 3/2/2007 1.0 Major Version 1.0 release 4/3/2007 1.1 Minor Version 1.1 release 5/11/2007 1.2 Minor Version 1.2 release 6/1/2007 2.0 Major Updated and revised the technical content. 7/3/2007 2.0.1 Editorial Changed language and formatting in the technical content. 7/20/2007 2.0.2 Editorial Changed language and formatting in the technical content. 8/10/2007 2.0.3 Editorial Changed language and formatting in the technical content. 9/28/2007 2.1 Minor Clarified the meaning of the technical content. 10/23/2007 3.0 Updated and revised the technical content. 11/30/2007 3.1 Minor Updated a normative reference.
1/25/2008 3.1.1 Editorial Changed language and formatting in the technical content. 3/14/2008 4.0 Major Updated and revised the technical content. 5/16/2008 4.0.1 Editorial Changed language and formatting in the technical content. 6/20/2008 5.0 Major Updated and revised the technical content. 7/25/2008 5.0.1 Editorial Changed language and formatting in the technical content. 8/29/2008 5.1 Minor Clarified the meaning of the technical content. 10/24/2008 5.2 Minor Clarified the meaning of the technical content. 12/5/2008 5.2.1 Editorial Editorial Update. 1/16/2009 6.0 Major Updated and revised the technical content. 2/27/2009 7.0 Major Updated and revised the
technical content. 4/10/2009 8.0 Major Updated and revised the technical content. 5/22/2009 8.1 Minor Clarified the meaning of the technical content. 7/2/2009 8.1.1 Editorial Changed language and formatting in the technical content. 8/14/2009 9.0 Major Updated and revised the technical content. 9/25/2009 10.0 Major Updated and revised the technical content. 11/6/2009 11.0 Major Updated and revised the technical content. 12/18/2009 11.0.1 Editorial Changed language and formatting in the technical content. 1/29/2010 12.0 Major Updated and revised the technical content. 3/12/2010 13.0 Major Updated and revised the technical content.
3/25/2011 16.0 None No changes to the meaning, language, or formatting of the technical content. 5/6/2011 17.0 Major Updated and revised the technical content. 6/17/2011 17.1 Clarified the meaning of the technical content. 9/23/2011 17.1 None No changes to the meaning, language, or formatting of the technical content. 12/16/2011 18.0 Major Updated and revised the technical content. 3/30/2012 18.0 None No changes to the meaning, language, or formatting of the technical content. 7/12/2012 18.0 None No changes to the meaning, language, or formatting of the technical content. 10/25/2012 19.0 Updated and revised the
technical content. 1/31/2013 19.0 None No changes to the meaning, language, or formatting of the technical content. 8/8/2013 20.0 Major Updated and revised the technical content. 11/14/2013 20.0 None No changes to the meaning, language, or formatting of the technical content. 2/13/2014 21.0 Major Updated and revised the technical content. 5/15/2014 21.0 None No changes to the meaning, language, or formatting of the technical content. 6/30/2015 22.0 Major Significantly changed the technical content. 10/16/2015 22.0 None No changes to the meaning, language, or formatting of the technical content.
certificate request. It also instructs the server that attestation might or might not be completed before any certificates can be issued. For more details, see [MS-WCCE] sections 3.1.2.4.2.2.2.8 and 3.2.2.6.2.1.4.5.7. 0x00004000 * CT_FLAG_ATTESTATION_WITHOUT_POLICY This flag instructs the server to not add any certificate policy OIDs to the issued certificate even though attestation SHOULD be performed. For more details, see [MS-WCCE] section 3.2.2.6.2.1.4.5.7. 0x00000200 * CT_FLAG_EK_TRUST_ON_USE This flag indicates that attestation based on the user's credentials is to be performed. For more details, see [MS-WCCE] section 3.2.2.6.2.1.4.5.7. 0x00000400 * CT_FLAG_EK_VALIDATE_CERT This flag indicates that attestation based on the hardware certificate of the Trusted Platform Module (TPM) is to be performed. For more details, see [MS-WCCE] section 3.2.2.6.2.1.4.5.7. 0x00000800 * CT_FLAG_EK_VALIDATE_KEY This flag indicates that attestation based on the hardware key of the TPM is to be performed. For more details, see [MS-WCCE]
Appendix A: Product Behavior The information in this specification is applicable to the following Microsoft products or supplemental software. References to product versions include released service packs. The terms "earlier" and "later", when used with a product version, refer to either all preceding versions or all subsequent versions, respectively. The term "through" refers to the inclusive range of versions. Applicable Microsoft products are listed chronologically in this section. Windows Client Windows 2000 Professional operating system Windows XP operating system Windows Vista operating system Windows 7 operating system Windows 8 operating system Windows 8.1 operating system Windows 10 operating system Windows Server Windows 2000 Server operating system Windows Server 2003 operating system Windows Server 2008 operating system Windows Server 2008 R2 operating system Windows Server 2012 operating system Windows Server 2012 R2 operating system Windows Server 2016 operating system Exceptions, if any, are noted below. If a service pack or Quick Fix Engineering (QFE) number appears with the product version, behavior changed in that service pack or QFE. The new behavior also applies to subsequent service packs of the product unless otherwise specified. If a product edition appears with the product version, behavior is different in that product edition. Unless otherwise specified, any statement of optional behavior in this specification that is prescribed using the terms "SHOULD" or "SHOULD NOT" implies product behavior in accordance with the SHOULD or SHOULD NOT prescription. Unless otherwise specified, the term "MAY" implies that the product does not follow the prescription. <1> Section 1.6: Windows defines four template versions: version 1, version 2, version 3, and version 4. Version 1 templates are supported by that run on Windows 2000 Server and later. Version 2 templates are supported by Microsoft CAs that run on Windows Server 2003 Enterprise Edition operating system, Windows Server 2003 R2 Datacenter Edition operating system, and Windows Server 2008 and later. Version 3 templates are supported by CAs that run on Windows Server 2008 and later. Version 4 templates are supported by CAs that run on Windows Server 2012 and later. <2> Section 2.1: The is implemented in Windows 2000 Server and later. <3> Section 2.2: The is implemented in Windows 2000 Server and
19 21 19 24 attribute 19 19 19 19 version 4 templates ( 19, 19) 19 18 19 18 18 N 10 ntSecurityDescriptor attribute end entity 14 13 13 15 O 11 P 17 17 17 17 18 18 18 18 18 29 30 R 10 10 10 11 11 17 S Security 29 29 29 Structures 12 12 12 12 21 25 21 19 21 19 24 msPKI-RA-Application-Policies attribute 19 19 19 19 version 4 templates ( 19, 19) 19 18 19 18 18 ntSecurityDescriptor attribute end entity 14 13 13 15 12 17 17 17 17 18 18 18 18 18 17 T 55 V 11 11