0

I'm really confused,When I choose cryptography service provider for certification authority (RSA # microsoft software key storage provider), why again should I choose rsa algorithm at new certification template? What is the difference between them؟

2
  • What do you mean "again"?
    – Crypt32
    Aug 4, 2015 at 4:26
  • For example,email encryption and signature by algorithms and functions within the user template and the result again encryption and signature by algorithms and functions within certification authority (RSA # microsoft software key storage provider) .Is that correct?
    – Ehsan
    Aug 4, 2015 at 9:30

1 Answer 1

0

When you install CA service, you specify cryptographic settings for CA certificate itself (cryptographic service provider, key algorithm, key length and signature algorithm).

When you configure certificate template, you specify provider name and public key algorithm for certificates issued by this particular certificate template. They don't need to match CA certificate cryptography settings. Regarding signature algorithm in certificate templates: this setting specifies the signature algorithm used to sign certificate request. Nothing else. It may not match issued certificate's signature algorithm, because certificate signature is controlled by CA server.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .