Share via


3.1.1.5.3.1.1.6 msDS-KeyCredentialLink

The object has class computer (or a subclass of computer).

The msDS-KeyCredentialLink value satisfies the following constraints:

For adding a value, the following constraints MUST be met

  • The Binary portion of this attribute is a well formed KEYCREDENTIALLINK_BLOB value. (See section 2.2.20 and sub-sections.)

    • The KeyUsage entry is KEY_USAGE_NGC.

    • The KeySource entry is KEY_SOURCE_AD.

    • The CustomKeyInformation entry is not present.

    • The KeyApproximateLastLogonTimeStamp entry is not present.

    • There is no existing value.

    • The requestor MUST be SELF.

  • For deleting a value:

    • No attribute level constraints are required.

The requestor MUST have the DS-Validated-Write-Computer validated write right.