We have a new certificate template with Key Archival enabled, and this
can be used via the Certificate Web Enrollment pages to successfully
get a certificate with archive key.
I want to make the certrqbi.asp page issue these certificates to users
as a default, to stop them having to go via the advanced request form.
I thought this might be as easy as forcing
XEnroll.GenKeyFlags|=CRYPT_EXPORTABLE;, but this still gets a denied
by policy module error (Private Key missing).
In short - has anyone already written a page to issue
Key-archivable-certificates based on the web enrollment basic request,
or should I start picking through certrqbi.asp in more detail?
Any advice much appreciated,
Richard