3.1.1.5.3.1.1.6 msDS-KeyCredentialLink

The object has class computer (or a subclass of computer).

The msDS-KeyCredentialLink value satisfies the following constraints:

For adding a value, the following constraints MUST be met

• The Binary portion of this attribute is a well formed KEYCREDENTIALLINK_BLOB value. (See section 2.2.20 and sub-sections.)

  • The KeyUsage entry is KEY_USAGE_NGC.

  • The KeySource entry is KEY_SOURCE_AD.

  • The CustomKeyInformation entry is not present.

  • The KeyApproximateLastLogonTimeStamp entry is not present.

  • There is no existing value.

  • The requestor MUST be SELF.

• For deleting a value:

  • No attribute level constraints are required.

The requestor MUST have the DS-Validated-Write-Computer validated write right.