2.9 pKIDefaultKeySpec Attribute

The following table shows the values that are allowed for the pKIDefaultKeySpec attribute.<11>

Value

Meaning

1

AT_KEYEXCHANGE – Keys used to encrypt/decrypt session keys.

2

AT_SIGNATURE – Keys used to create and verify digital signatures.

For schema details of this attribute, see [MS-ADA3] section 2.97.