0

I'm really confused,When I choose cryptography service provider for certification authority (RSA # microsoft software key storage provider), why again should I choose rsa algorithm at new certification template? What is the difference between them؟

  • What do you mean "again"? – Crypt32 Aug 4 '15 at 4:26
  • For example,email encryption and signature by algorithms and functions within the user template and the result again encryption and signature by algorithms and functions within certification authority (RSA # microsoft software key storage provider) .Is that correct? – Ehsan Aug 4 '15 at 9:30
0

When you install CA service, you specify cryptographic settings for CA certificate itself (cryptographic service provider, key algorithm, key length and signature algorithm).

When you configure certificate template, you specify provider name and public key algorithm for certificates issued by this particular certificate template. They don't need to match CA certificate cryptography settings. Regarding signature algorithm in certificate templates: this setting specifies the signature algorithm used to sign certificate request. Nothing else. It may not match issued certificate's signature algorithm, because certificate signature is controlled by CA server.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.