Microsoft® Windows Server 2003: Administrator’s Companion

More Vocabulary

Chapter 20 and Chapter 21 exposed you to most of the security vocabulary you need to work with Certificate Services, but you need to learn some additional terms, as defined in the following sections.

Policy Modules

A policy module is a set of instructions that tells the CA what to do with incoming certificate requests. A policy module can automatically approve or reject a request, based on any criteria coded into the module; it can also mark a request as pending and leave it for a human administrator to handle. Policy modules can also modify the content of a certificate by adding or removing extensions; the standard policy module supplied with Windows Server 2003 does the following:

• Approves incoming requests or marks them as ...