What's Changed

• Fixed missing TLV header in OID encoding

This is an updated SID Policy Module version. The following changes are included in this release:

• fixed known issues with Install-PolicyModule.ps1 installation script
• Added new -RegisterOnly parameter to Install-PolicyModule.ps1 installation script to upgrade policy module from previous versions.
• Added SID policy enforcement to a new SID syntax via URI name type in SAN extension: Preview of SAN URI for Certificate Strong Mapping for KB5014754. A new documentation page is created to better understand the policy module behavior based on various conditions: Product Behavior
• Aligned default target account in Active Directory with AD CS behavior that defaults to look in account's destination domain instead of global catalogs.
• Added more logging details.
• Addressed issue when SID extension enforcement policy instructs CA to pend request when request is already pending. This prevents pending request to be issued. Pending enforcement policy now applies only to new requests. If request is pending, then policy module asks CA to issue the certificate.

Installation guide

Follow installation guide for installation instructions.

When upgrading policy module to newer version:

1. Stop CA service
2. extract ZIP archive to target folder
3. Run Install-PolicyModule.ps1 -RegisterOnly command to register new policy module's COM components. Specify -Path parameter if installation script is called from different folder.

This is an initial release.