Mastering Active Directory

Cryptographic provider

With CA, we can use Microsoft's default cryptographic provider, which is RSA Microsoft Software Key Storage Provider or other advanced providers, such as ECDSA_P256, ECDSA_P521, or ECDSA_P384. Based on the used provider, the length of the cryptography key and hash algorithm will also change. Unless there are specific reasons, it is always recommended to use Microsoft RSA.