AWS::PCAConnectorAD::Template TemplateV3

v3 template schema that uses Key Storage Providers.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON


{
  "CertificateValidity" : CertificateValidity,
  "EnrollmentFlags" : EnrollmentFlagsV3,
  "Extensions" : ExtensionsV3,
  "GeneralFlags" : GeneralFlagsV3,
  "HashAlgorithm" : String,
  "PrivateKeyAttributes" : PrivateKeyAttributesV3,
  "PrivateKeyFlags" : PrivateKeyFlagsV3,
  "SubjectNameFlags" : SubjectNameFlagsV3,
  "SupersededTemplates" : [ String, ... ]
}

YAML


  CertificateValidity: 
    CertificateValidity
  EnrollmentFlags: 
    EnrollmentFlagsV3
  Extensions: 
    ExtensionsV3
  GeneralFlags: 
    GeneralFlagsV3
  HashAlgorithm: String
  PrivateKeyAttributes: 
    PrivateKeyAttributesV3
  PrivateKeyFlags: 
    PrivateKeyFlagsV3
  SubjectNameFlags: 
    SubjectNameFlagsV3
  SupersededTemplates: 
    - String

Properties

CertificateValidity

Certificate validity describes the validity and renewal periods of a certificate.

Required: Yes

Type: CertificateValidity

Update requires: No interruption

EnrollmentFlags

Enrollment flags describe the enrollment settings for certificates such as using the existing private key and deleting expired or revoked certificates.

Required: Yes

Type: EnrollmentFlagsV3

Update requires: No interruption

Extensions

Extensions describe the key usage extensions and application policies for a template.

Required: Yes

Type: ExtensionsV3

Update requires: No interruption

GeneralFlags

General flags describe whether the template is used for computers or users and if the template can be used with autoenrollment.

Required: Yes

Type: GeneralFlagsV3

Update requires: No interruption

HashAlgorithm

Specifies the hash algorithm used to hash the private key.

Required: Yes

Type: String

Allowed values: SHA256 | SHA384 | SHA512

Update requires: No interruption

PrivateKeyAttributes

Private key attributes allow you to specify the algorithm, minimal key length, key spec, key usage, and cryptographic providers for the private key of a certificate for v3 templates. V3 templates allow you to use Key Storage Providers.

Required: Yes

Type: PrivateKeyAttributesV3

Update requires: No interruption

PrivateKeyFlags

Private key flags for v3 templates specify the client compatibility, if the private key can be exported, if user input is required when using a private key, and if an alternate signature algorithm should be used.

Required: Yes

Type: PrivateKeyFlagsV3

Update requires: No interruption

SubjectNameFlags