Historical Content Alert

This is a historical content for Windows NT 4.0 product and is presented for informative purposes only. All content in this directory is copyrighted and owned by Microsoft.

Policy Module Customization

Certpdef.dll is the default policy module, and is installed during Certificate Server setup. A new policy module can be installed at any time using the following procedure.

To install a new policy module
  1. Stop the Certificate Authority service using the Services applet in the Windows NT Control Panel.

  2. Run RegSvr32 with the /u option to remove the existing policy module DLL.. For example, to remove the default policy module enter:
    regsvr32 /u certpdef.dll
     
  3. Run RegSvr32 on the new policy module DLL. For example, to install a policy module named mypolicy.dll enter:
    regsvr32 mypolicy.dll
     
  4. Restart the Certificate Authority service using the Services applet in the Windows NT Control Panel, and the new policy module will be invoked for any new certificate request.

    Note You must install another policy module after removing the existing one before attempting to restart the Certificate Authority service. If no policy module has been installed and Certificate Authority is started, it will log an error event and exit.


Share this article: