2.2.20.2 KEYCREDENTIALLINK_BLOB

The KEYCREDENTIALLINK_BLOB structure is a representation of a single credential stored as a series of values. This structure is stored as the binary portion of the msDS-KeyCredentialLink DN-Binary attribute (section 3.1.1.5.3.1.1.6). The structure contains a Version field followed by an array of KEYCREDENTIALLINK_ENTRY structures (section 2.2.20.3). The KEYCREDENTIALLINK_ENTRY structure MUST be sorted by their Identifier fields in increasing order.


0


1


2


3


4


5


6


7


8


9

1
0


1


2


3


4


5


6


7


8


9

2
0


1


2


3


4


5


6


7


8


9

3
0


1

Version

First KEYCREDENTIALLINK_ENTRY (variable)

...

Second KEYCREDENTIALLINK_ENTRY (variable)

...

Nth KEYCREDENTIALLINK_ENTRY (variable)

...

Version (4 bytes): A 32-bit unsigned integer that defines the version of the KEYCREDENTIALLINK_BLOB.  The Version field MUST be set to KEY_CREDENTIAL_LINK_VERSION_2.

KEYCREDENTIALLINK_ENTRY (variable): A sequence of KEYCREDENTIALLINK_ENTRY structures (section 2.2.20.3) that describe various aspects of a single credential.