AD CS certificate template requirements
Retained observation
Source metadata changed; retained article content is unchanged.
Read the current Microsoft source · Link to this observation · Compare any two versions
Observation details · observed 23 Oct 08:48 UTC
- Observed by ChangeIntel
- 23 Oct 08:48 UTC
- Source update metadata
- 2 Oct 17:38 UTC
- First observed on this installation
- 5 Oct 23:18 UTC
- Last successful check
- today 03:43 UTC
- Next check due
- today 09:43 UTC
Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment.
Watch this page to review its changes in My radar.
Timeline
From the capture of 23 Oct 08:48 UTC- 11 undated sections
- 17 with conditions
- 32 recorded changes
Settings and overrides named on this page
Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.
ML-DSA
Requirements, exceptions and scope
Only enterprise CAs issue certificates based on templates. Active Directory Domain Services (AD DS) stores these templates, and every CA in the forest shares them.…
ML-DSA
Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.
How this timeline changed
Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.
20 earlier changes
-
-
-
-
-
Requirement added Request Handling and Issuance Requirementsin Design a secure templateMicrosoft's source, commit ecef043
-
-
-
-
-
-
-
-
Scope added The issued certificate doesn't contain the expected capabilitiesin Troubleshoot template managementMicrosoft's source, commit ecef043
-
-
-
-
Observed history and review priority
Captured 23 Oct 08:48 UTC; extracted 23 Oct 08:48 UTC. Extractor: microsoft-1/9/d9863eb412f92fa5ec3a8ca32e2dd7cfe8095530f456ecb1866608d1166a435d.
Review priority. Extracted assertions require review · Publisher marks guidance tentative · Applicability or exceptions require review
0 date changes and 0 condition changes across 1 compared revisions. Suggested check interval: 6 hours.
Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.
Retained observations · 9
Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.
- 23 Oct 08:48 UTC · 25 candidates
- 13 Oct 00:55 UTC · 25 candidates
- 5 Oct 23:18 UTC · 23 candidates
- 2 Oct 12:42 UTC · 25 candidates
- 7 Mar 2024 22:05 UTC · 7 candidates
- 20 Feb 2024 07:33 UTC · 7 candidates
- 19 Feb 2024 23:56 UTC · 7 candidates
- 31 Jan 2024 20:43 UTC · 7 candidates
- 16 Jan 2024 05:40 UTC · 7 candidates
Microsoft's edits
History on GitHubCommits to the page's source in MicrosoftDocs/windowsserverdocs, with Microsoft's own messages. Commit dates can be hours or days before Learn publishes the change. ChangeIntel keeps a copy of each diff, so an edit stays readable here if GitHub stops serving it. Read today 00:51 UTC.
Related public evidence
- Public source · 13 Oct 2026Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability
- Official documentation · 13 Oct 2026AD CS certificate template capabilities
- Public source · 8 Sep 2026Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability
- Public source · 8 Sep 2026Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability
- Public source · 8 Sep 2026Active Directory Certificate Services (AD CS) Tampering Vulnerability
- Public source · 8 Sep 2026Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability
Retained observations
- 23 Oct 08:48 UTC · shown above
- 13 Oct 00:55 UTC
1 removed passage (18 words). The changed wording mentions dates and deadlines. Review the source to confirm the effect.
- 5 Oct 23:18 UTC
Baseline for retained history; no earlier retained text to compare.
What changed
First observed 18 Oct 2026No field changes are shown for this selection.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.