Policy Module

The true-Xtender Policy Module is a policy module for Active Directory Certificate Services (AD CS) included in Microsoft Windows Server that allows altering the subject DN and X.509 extensions of certificates issued with Active Directory Certificate Services. It allows certificate content manipulation at a level that is otherwise not possible with Active Directory Certificate Services alone.
Key Features:
- Supports Standalone CA, Enterprise CA, Root CA and Subordinate CA types.
- Works with ADCS in Microsoft Windows Server 2012R2 and higher.
- The functionality can be defined for each certificate template separately or default configuration can be applied to all requests for which no specific template configuration exists or is enabled.
- Retains the functionality of the original or third-party Active Directory Certificate Services policy module including special Enterprise functionality.
- Add custom extensions that can be defined using an XML based description language. Custom extensions can contain dynamic data taken from the request and provide full control over the X.509 extension content (insert, remove and modify). The XML description language supports all ASN.1 constructs that are commonly used in X.509 extensions and is used to validate certificate content and enforce corporate and regulatory policies. This allows e.g., to ensure that SubjectAltName entries contain only hosts of domains that are under the control of the company.