dsclibrary/MEMBER_SUBCA.DSC.ps1 some of the CApolicy.inf parameters may not work

[kungfoome]

LabBuilder/src/dsclibrary/MEMBER_SUBCA.DSC.ps1

Line 115 in 291e646

Contents = "[Version]`r`n Signature= `"$Windows NT$`"`r`n[Certsrv_Server]`r`n RenewalKeyLength=2048`r`n RenewalValidityPeriod=Years`r`n RenewalValidityPeriodUnits=10`r`n LoadDefaultTemplates=1`r`n AlternateSignatureAlgorithm=1`r`n"

AlternateSignatureAlgorithm should probably be 0. This can cause some issues with non windows machines. I had some issues just getting it to trust the cert on windows itself. This was on server 2016 as well.

Again, a decent config might be something like

[Version]
Signature="$Windows NT$"

[Certsrv_Server]
RenewalKeyLength=4096
RenewalValidityPeriod=Years
RenewalValidityPeriodUnits=10
AlternateSignatureAlgorithm=0
CNGHashAlgorithm=SHA256
LoadDefaultTemplates=0

this is based on the same articles in #322

[PlagueHO]

Thanks @kungfu71186 - I'll do a big batch of fixes on Thursday night (snowed under the next two nights).