AWS Native v0.105.0, May 2 24

AWS Native is in preview. AWS Classic is fully supported.

AWS Native v0.105.0 published on Thursday, May 2, 2024 by Pulumi

pulumi/pulumi-aws-native

aws-native.pcaconnectorad.Template

Explore with Pulumi AI

AWS Native is in preview. AWS Classic is fully supported.

AWS Native v0.105.0 published on Thursday, May 2, 2024 by Pulumi

pulumi/pulumi-aws-native

Create Template Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Template(name: string, args: TemplateArgs, opts?: CustomResourceOptions);

@overload
def Template(resource_name: str,
             args: TemplateArgs,
             opts: Optional[ResourceOptions] = None)

@overload
def Template(resource_name: str,
             opts: Optional[ResourceOptions] = None,
             connector_arn: Optional[str] = None,
             definition: Optional[Union[TemplateDefinition0PropertiesArgs, TemplateDefinition1PropertiesArgs, TemplateDefinition2PropertiesArgs]] = None,
             name: Optional[str] = None,
             reenroll_all_certificate_holders: Optional[bool] = None,
             tags: Optional[Mapping[str, str]] = None)

func NewTemplate(ctx *Context, name string, args TemplateArgs, opts ...ResourceOption) (*Template, error)

public Template(string name, TemplateArgs args, CustomResourceOptions? opts = null)

public Template(String name, TemplateArgs args)
public Template(String name, TemplateArgs args, CustomResourceOptions options)

type: aws-native:pcaconnectorad:Template
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args TemplateArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args TemplateArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args TemplateArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args TemplateArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args TemplateArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Example

The following reference example uses placeholder values for all input properties.

Coming soon!

Coming soon!

Coming soon!

Coming soon!

const templateResource = new aws_native.pcaconnectorad.Template("templateResource", {
    connectorArn: "string",
    definition: {
        templateV2: {
            certificateValidity: {
                renewalPeriod: {
                    period: 0,
                    periodType: aws_native.pcaconnectorad.TemplateValidityPeriodType.Hours,
                },
                validityPeriod: {
                    period: 0,
                    periodType: aws_native.pcaconnectorad.TemplateValidityPeriodType.Hours,
                },
            },
            enrollmentFlags: {
                enableKeyReuseOnNtTokenKeysetStorageFull: false,
                includeSymmetricAlgorithms: false,
                noSecurityExtension: false,
                removeInvalidCertificateFromPersonalStore: false,
                userInteractionRequired: false,
            },
            extensions: {
                keyUsage: {
                    usageFlags: {
                        dataEncipherment: false,
                        digitalSignature: false,
                        keyAgreement: false,
                        keyEncipherment: false,
                        nonRepudiation: false,
                    },
                    critical: false,
                },
                applicationPolicies: {
                    policies: [{
                        policyType: aws_native.pcaconnectorad.TemplateApplicationPolicyType.AllApplicationPolicies,
                    }],
                    critical: false,
                },
            },
            generalFlags: {
                autoEnrollment: false,
                machineType: false,
            },
            privateKeyAttributes: {
                keySpec: aws_native.pcaconnectorad.TemplateKeySpec.KeyExchange,
                minimalKeyLength: 0,
                cryptoProviders: ["string"],
            },
            privateKeyFlags: {
                clientVersion: aws_native.pcaconnectorad.TemplateClientCompatibilityV2.WindowsServer2003,
                exportableKey: false,
                strongKeyProtectionRequired: false,
            },
            subjectNameFlags: {
                requireCommonName: false,
                requireDirectoryPath: false,
                requireDnsAsCn: false,
                requireEmail: false,
                sanRequireDirectoryGuid: false,
                sanRequireDns: false,
                sanRequireDomainDns: false,
                sanRequireEmail: false,
                sanRequireSpn: false,
                sanRequireUpn: false,
            },
            supersededTemplates: ["string"],
        },
    },
    name: "string",
    reenrollAllCertificateHolders: false,
    tags: {
        string: "string",
    },
});

Coming soon!

Template Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The Template resource accepts the following input properties:

ConnectorArn string
Definition Pulumi.AwsNative.PcaConnectorAd.Inputs.TemplateDefinition0Properties | Pulumi.AwsNative.PcaConnectorAd.Inputs.TemplateDefinition1Properties | Pulumi.AwsNative.PcaConnectorAd.Inputs.TemplateDefinition2Properties
Name string
ReenrollAllCertificateHolders bool
Tags Dictionary<string, string>

ConnectorArn string
Definition TemplateDefinition0PropertiesArgs | TemplateDefinition1PropertiesArgs | TemplateDefinition2PropertiesArgs
Name string
ReenrollAllCertificateHolders bool
Tags map[string]string

connectorArn String
definition TemplateDefinition0Properties | TemplateDefinition1Properties | TemplateDefinition2Properties
name String
reenrollAllCertificateHolders Boolean
tags Map<String,String>

connectorArn string
definition TemplateDefinition0Properties | TemplateDefinition1Properties | TemplateDefinition2Properties
name string
reenrollAllCertificateHolders boolean
tags {[key: string]: string}

connector_arn str
definition TemplateDefinition0PropertiesArgs | TemplateDefinition1PropertiesArgs | TemplateDefinition2PropertiesArgs
name str
reenroll_all_certificate_holders bool
tags Mapping[str, str]

connectorArn String
definition Property Map | Property Map | Property Map
name String
reenrollAllCertificateHolders Boolean
tags Map<String>

Outputs

All input properties are implicitly available as output properties. Additionally, the Template resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.
TemplateArn string

Id string: The provider-assigned unique ID for this managed resource.
TemplateArn string

id String: The provider-assigned unique ID for this managed resource.
templateArn String

id string: The provider-assigned unique ID for this managed resource.
templateArn string

id str: The provider-assigned unique ID for this managed resource.
template_arn str

id String: The provider-assigned unique ID for this managed resource.
templateArn String

Supporting Types

TemplateApplicationPolicies, TemplateApplicationPoliciesArgs

Policies List<Union<Pulumi.AwsNative.PcaConnectorAd.Inputs.TemplateApplicationPolicy0Properties, Pulumi.AwsNative.PcaConnectorAd.Inputs.TemplateApplicationPolicy1Properties>>
Critical bool

Policies []interface{}
Critical bool

policies List<Either<TemplateApplicationPolicy0Properties,TemplateApplicationPolicy1Properties>>
critical Boolean

policies (TemplateApplicationPolicy0Properties | TemplateApplicationPolicy1Properties)[]
critical boolean

policies Sequence[Union[TemplateApplicationPolicy0Properties, TemplateApplicationPolicy1Properties]]
critical bool

policies List<Property Map | Property Map>
critical Boolean

TemplateApplicationPolicy0Properties, TemplateApplicationPolicy0PropertiesArgs

PolicyType Pulumi.AwsNative.PcaConnectorAd.TemplateApplicationPolicyType

PolicyType TemplateApplicationPolicyType

policyType TemplateApplicationPolicyType

policyType TemplateApplicationPolicyType

policy_type TemplateApplicationPolicyType

policyType "ALL_APPLICATION_POLICIES" | "ANY_PURPOSE" | "ATTESTATION_IDENTITY_KEY_CERTIFICATE" | "CERTIFICATE_REQUEST_AGENT" | "CLIENT_AUTHENTICATION" | "CODE_SIGNING" | "CTL_USAGE" | "DIGITAL_RIGHTS" | "DIRECTORY_SERVICE_EMAIL_REPLICATION" | "DISALLOWED_LIST" | "DNS_SERVER_TRUST" | "DOCUMENT_ENCRYPTION" | "DOCUMENT_SIGNING" | "DYNAMIC_CODE_GENERATOR" | "EARLY_LAUNCH_ANTIMALWARE_DRIVER" | "EMBEDDED_WINDOWS_SYSTEM_COMPONENT_VERIFICATION" | "ENCLAVE" | "ENCRYPTING_FILE_SYSTEM" | "ENDORSEMENT_KEY_CERTIFICATE" | "FILE_RECOVERY" | "HAL_EXTENSION" | "IP_SECURITY_END_SYSTEM" | "IP_SECURITY_IKE_INTERMEDIATE" | "IP_SECURITY_TUNNEL_TERMINATION" | "IP_SECURITY_USER" | "ISOLATED_USER_MODE" | "KDC_AUTHENTICATION" | "KERNEL_MODE_CODE_SIGNING" | "KEY_PACK_LICENSES" | "KEY_RECOVERY" | "KEY_RECOVERY_AGENT" | "LICENSE_SERVER_VERIFICATION" | "LIFETIME_SIGNING" | "MICROSOFT_PUBLISHER" | "MICROSOFT_TIME_STAMPING" | "MICROSOFT_TRUST_LIST_SIGNING" | "OCSP_SIGNING" | "OEM_WINDOWS_SYSTEM_COMPONENT_VERIFICATION" | "PLATFORM_CERTIFICATE" | "PREVIEW_BUILD_SIGNING" | "PRIVATE_KEY_ARCHIVAL" | "PROTECTED_PROCESS_LIGHT_VERIFICATION" | "PROTECTED_PROCESS_VERIFICATION" | "QUALIFIED_SUBORDINATION" | "REVOKED_LIST_SIGNER" | "ROOT_PROGRAM_AUTO_UPDATE_CA_REVOCATION" | "ROOT_PROGRAM_AUTO_UPDATE_END_REVOCATION" | "ROOT_PROGRAM_NO_OSCP_FAILOVER_TO_CRL" | "ROOT_LIST_SIGNER" | "SECURE_EMAIL" | "SERVER_AUTHENTICATION" | "SMART_CARD_LOGIN" | "SPC_ENCRYPTED_DIGEST_RETRY_COUNT" | "SPC_RELAXED_PE_MARKER_CHECK" | "TIME_STAMPING" | "WINDOWS_HARDWARE_DRIVER_ATTESTED_VERIFICATION" | "WINDOWS_HARDWARE_DRIVER_EXTENDED_VERIFICATION" | "WINDOWS_HARDWARE_DRIVER_VERIFICATION" | "WINDOWS_HELLO_RECOVERY_KEY_ENCRYPTION" | "WINDOWS_KITS_COMPONENT" | "WINDOWS_RT_VERIFICATION" | "WINDOWS_SOFTWARE_EXTENSION_VERIFICATION" | "WINDOWS_STORE" | "WINDOWS_SYSTEM_COMPONENT_VERIFICATION" | "WINDOWS_TCB_COMPONENT" | "WINDOWS_THIRD_PARTY_APPLICATION_COMPONENT" | "WINDOWS_UPDATE"

TemplateApplicationPolicy1Properties, TemplateApplicationPolicy1PropertiesArgs

PolicyObjectIdentifier string

PolicyObjectIdentifier string

policyObjectIdentifier String

policyObjectIdentifier string

policy_object_identifier str

policyObjectIdentifier String

TemplateApplicationPolicyType, TemplateApplicationPolicyTypeArgs

AllApplicationPolicies: ALL_APPLICATION_POLICIES
AnyPurpose: ANY_PURPOSE
AttestationIdentityKeyCertificate: ATTESTATION_IDENTITY_KEY_CERTIFICATE
CertificateRequestAgent: CERTIFICATE_REQUEST_AGENT
ClientAuthentication: CLIENT_AUTHENTICATION
CodeSigning: CODE_SIGNING
CtlUsage: CTL_USAGE
DigitalRights: DIGITAL_RIGHTS
DirectoryServiceEmailReplication: DIRECTORY_SERVICE_EMAIL_REPLICATION
DisallowedList: DISALLOWED_LIST
DnsServerTrust: DNS_SERVER_TRUST
DocumentEncryption: DOCUMENT_ENCRYPTION
DocumentSigning: DOCUMENT_SIGNING
DynamicCodeGenerator: DYNAMIC_CODE_GENERATOR
EarlyLaunchAntimalwareDriver: EARLY_LAUNCH_ANTIMALWARE_DRIVER
EmbeddedWindowsSystemComponentVerification: EMBEDDED_WINDOWS_SYSTEM_COMPONENT_VERIFICATION
Enclave: ENCLAVE
EncryptingFileSystem: ENCRYPTING_FILE_SYSTEM
EndorsementKeyCertificate: ENDORSEMENT_KEY_CERTIFICATE
FileRecovery: FILE_RECOVERY
HalExtension: HAL_EXTENSION
IpSecurityEndSystem: IP_SECURITY_END_SYSTEM
IpSecurityIkeIntermediate: IP_SECURITY_IKE_INTERMEDIATE
IpSecurityTunnelTermination: IP_SECURITY_TUNNEL_TERMINATION
IpSecurityUser: IP_SECURITY_USER
IsolatedUserMode: ISOLATED_USER_MODE
KdcAuthentication: KDC_AUTHENTICATION
KernelModeCodeSigning: KERNEL_MODE_CODE_SIGNING
KeyPackLicenses: KEY_PACK_LICENSES
KeyRecovery: KEY_RECOVERY
KeyRecoveryAgent: KEY_RECOVERY_AGENT
LicenseServerVerification: LICENSE_SERVER_VERIFICATION
LifetimeSigning: LIFETIME_SIGNING
MicrosoftPublisher: MICROSOFT_PUBLISHER
MicrosoftTimeStamping: MICROSOFT_TIME_STAMPING
MicrosoftTrustListSigning: MICROSOFT_TRUST_LIST_SIGNING
OcspSigning: OCSP_SIGNING
OemWindowsSystemComponentVerification: OEM_WINDOWS_SYSTEM_COMPONENT_VERIFICATION
PlatformCertificate: PLATFORM_CERTIFICATE
PreviewBuildSigning: PREVIEW_BUILD_SIGNING
PrivateKeyArchival: PRIVATE_KEY_ARCHIVAL
ProtectedProcessLightVerification: PROTECTED_PROCESS_LIGHT_VERIFICATION
ProtectedProcessVerification: PROTECTED_PROCESS_VERIFICATION
QualifiedSubordination: QUALIFIED_SUBORDINATION
RevokedListSigner: REVOKED_LIST_SIGNER
RootProgramAutoUpdateCaRevocation: ROOT_PROGRAM_AUTO_UPDATE_CA_REVOCATION
RootProgramAutoUpdateEndRevocation: ROOT_PROGRAM_AUTO_UPDATE_END_REVOCATION
RootProgramNoOscpFailoverToCrl: ROOT_PROGRAM_NO_OSCP_FAILOVER_TO_CRL
RootListSigner: ROOT_LIST_SIGNER
SecureEmail: SECURE_EMAIL
ServerAuthentication: SERVER_AUTHENTICATION
SmartCardLogin: SMART_CARD_LOGIN
SpcEncryptedDigestRetryCount: SPC_ENCRYPTED_DIGEST_RETRY_COUNT
SpcRelaxedPeMarkerCheck: SPC_RELAXED_PE_MARKER_CHECK
TimeStamping: TIME_STAMPING
WindowsHardwareDriverAttestedVerification: WINDOWS_HARDWARE_DRIVER_ATTESTED_VERIFICATION
WindowsHardwareDriverExtendedVerification: WINDOWS_HARDWARE_DRIVER_EXTENDED_VERIFICATION
WindowsHardwareDriverVerification: WINDOWS_HARDWARE_DRIVER_VERIFICATION
WindowsHelloRecoveryKeyEncryption: WINDOWS_HELLO_RECOVERY_KEY_ENCRYPTION
WindowsKitsComponent: WINDOWS_KITS_COMPONENT
WindowsRtVerification: WINDOWS_RT_VERIFICATION
WindowsSoftwareExtensionVerification: WINDOWS_SOFTWARE_EXTENSION_VERIFICATION
WindowsStore: WINDOWS_STORE
WindowsSystemComponentVerification: WINDOWS_SYSTEM_COMPONENT_VERIFICATION
WindowsTcbComponent: WINDOWS_TCB_COMPONENT
WindowsThirdPartyApplicationComponent: WINDOWS_THIRD_PARTY_APPLICATION_COMPONENT
WindowsUpdate: WINDOWS_UPDATE

TemplateApplicationPolicyTypeAllApplicationPolicies: ALL_APPLICATION_POLICIES
TemplateApplicationPolicyTypeAnyPurpose: ANY_PURPOSE
TemplateApplicationPolicyTypeAttestationIdentityKeyCertificate: ATTESTATION_IDENTITY_KEY_CERTIFICATE
TemplateApplicationPolicyTypeCertificateRequestAgent: CERTIFICATE_REQUEST_AGENT
TemplateApplicationPolicyTypeClientAuthentication: CLIENT_AUTHENTICATION
TemplateApplicationPolicyTypeCodeSigning: CODE_SIGNING
TemplateApplicationPolicyTypeCtlUsage: CTL_USAGE
TemplateApplicationPolicyTypeDigitalRights: DIGITAL_RIGHTS
TemplateApplicationPolicyTypeDirectoryServiceEmailReplication: DIRECTORY_SERVICE_EMAIL_REPLICATION
TemplateApplicationPolicyTypeDisallowedList: DISALLOWED_LIST
TemplateApplicationPolicyTypeDnsServerTrust: DNS_SERVER_TRUST
TemplateApplicationPolicyTypeDocumentEncryption: DOCUMENT_ENCRYPTION
TemplateApplicationPolicyTypeDocumentSigning: DOCUMENT_SIGNING
TemplateApplicationPolicyTypeDynamicCodeGenerator: DYNAMIC_CODE_GENERATOR
TemplateApplicationPolicyTypeEarlyLaunchAntimalwareDriver: EARLY_LAUNCH_ANTIMALWARE_DRIVER
TemplateApplicationPolicyTypeEmbeddedWindowsSystemComponentVerification: EMBEDDED_WINDOWS_SYSTEM_COMPONENT_VERIFICATION
TemplateApplicationPolicyTypeEnclave: ENCLAVE
TemplateApplicationPolicyTypeEncryptingFileSystem: ENCRYPTING_FILE_SYSTEM
TemplateApplicationPolicyTypeEndorsementKeyCertificate: ENDORSEMENT_KEY_CERTIFICATE
TemplateApplicationPolicyTypeFileRecovery: FILE_RECOVERY
TemplateApplicationPolicyTypeHalExtension: HAL_EXTENSION
TemplateApplicationPolicyTypeIpSecurityEndSystem: IP_SECURITY_END_SYSTEM
TemplateApplicationPolicyTypeIpSecurityIkeIntermediate: IP_SECURITY_IKE_INTERMEDIATE
TemplateApplicationPolicyTypeIpSecurityTunnelTermination: IP_SECURITY_TUNNEL_TERMINATION
TemplateApplicationPolicyTypeIpSecurityUser: IP_SECURITY_USER
TemplateApplicationPolicyTypeIsolatedUserMode: ISOLATED_USER_MODE
TemplateApplicationPolicyTypeKdcAuthentication: KDC_AUTHENTICATION
TemplateApplicationPolicyTypeKernelModeCodeSigning: KERNEL_MODE_CODE_SIGNING
TemplateApplicationPolicyTypeKeyPackLicenses: KEY_PACK_LICENSES
TemplateApplicationPolicyTypeKeyRecovery: KEY_RECOVERY
TemplateApplicationPolicyTypeKeyRecoveryAgent: KEY_RECOVERY_AGENT
TemplateApplicationPolicyTypeLicenseServerVerification: LICENSE_SERVER_VERIFICATION
TemplateApplicationPolicyTypeLifetimeSigning: LIFETIME_SIGNING
TemplateApplicationPolicyTypeMicrosoftPublisher: MICROSOFT_PUBLISHER
TemplateApplicationPolicyTypeMicrosoftTimeStamping: MICROSOFT_TIME_STAMPING
TemplateApplicationPolicyTypeMicrosoftTrustListSigning: MICROSOFT_TRUST_LIST_SIGNING
TemplateApplicationPolicyTypeOcspSigning: OCSP_SIGNING
TemplateApplicationPolicyTypeOemWindowsSystemComponentVerification: OEM_WINDOWS_SYSTEM_COMPONENT_VERIFICATION
TemplateApplicationPolicyTypePlatformCertificate: PLATFORM_CERTIFICATE
TemplateApplicationPolicyTypePreviewBuildSigning: PREVIEW_BUILD_SIGNING
TemplateApplicationPolicyTypePrivateKeyArchival: PRIVATE_KEY_ARCHIVAL
TemplateApplicationPolicyTypeProtectedProcessLightVerification: PROTECTED_PROCESS_LIGHT_VERIFICATION
TemplateApplicationPolicyTypeProtectedProcessVerification: PROTECTED_PROCESS_VERIFICATION
TemplateApplicationPolicyTypeQualifiedSubordination: QUALIFIED_SUBORDINATION
TemplateApplicationPolicyTypeRevokedListSigner: REVOKED_LIST_SIGNER
TemplateApplicationPolicyTypeRootProgramAutoUpdateCaRevocation: ROOT_PROGRAM_AUTO_UPDATE_CA_REVOCATION
TemplateApplicationPolicyTypeRootProgramAutoUpdateEndRevocation: ROOT_PROGRAM_AUTO_UPDATE_END_REVOCATION
TemplateApplicationPolicyTypeRootProgramNoOscpFailoverToCrl: ROOT_PROGRAM_NO_OSCP_FAILOVER_TO_CRL
TemplateApplicationPolicyTypeRootListSigner: ROOT_LIST_SIGNER
TemplateApplicationPolicyTypeSecureEmail: SECURE_EMAIL
TemplateApplicationPolicyTypeServerAuthentication: SERVER_AUTHENTICATION
TemplateApplicationPolicyTypeSmartCardLogin: SMART_CARD_LOGIN
TemplateApplicationPolicyTypeSpcEncryptedDigestRetryCount: SPC_ENCRYPTED_DIGEST_RETRY_COUNT
TemplateApplicationPolicyTypeSpcRelaxedPeMarkerCheck: SPC_RELAXED_PE_MARKER_CHECK
TemplateApplicationPolicyTypeTimeStamping: TIME_STAMPING
TemplateApplicationPolicyTypeWindowsHardwareDriverAttestedVerification: WINDOWS_HARDWARE_DRIVER_ATTESTED_VERIFICATION
TemplateApplicationPolicyTypeWindowsHardwareDriverExtendedVerification: WINDOWS_HARDWARE_DRIVER_EXTENDED_VERIFICATION
TemplateApplicationPolicyTypeWindowsHardwareDriverVerification: WINDOWS_HARDWARE_DRIVER_VERIFICATION
TemplateApplicationPolicyTypeWindowsHelloRecoveryKeyEncryption: WINDOWS_HELLO_RECOVERY_KEY_ENCRYPTION
TemplateApplicationPolicyTypeWindowsKitsComponent: WINDOWS_KITS_COMPONENT
TemplateApplicationPolicyTypeWindowsRtVerification: WINDOWS_RT_VERIFICATION
TemplateApplicationPolicyTypeWindowsSoftwareExtensionVerification: WINDOWS_SOFTWARE_EXTENSION_VERIFICATION
TemplateApplicationPolicyTypeWindowsStore: WINDOWS_STORE
TemplateApplicationPolicyTypeWindowsSystemComponentVerification: WINDOWS_SYSTEM_COMPONENT_VERIFICATION
TemplateApplicationPolicyTypeWindowsTcbComponent: WINDOWS_TCB_COMPONENT
TemplateApplicationPolicyTypeWindowsThirdPartyApplicationComponent: WINDOWS_THIRD_PARTY_APPLICATION_COMPONENT
TemplateApplicationPolicyTypeWindowsUpdate: WINDOWS_UPDATE

AllApplicationPolicies: ALL_APPLICATION_POLICIES
AnyPurpose: ANY_PURPOSE
AttestationIdentityKeyCertificate: ATTESTATION_IDENTITY_KEY_CERTIFICATE
CertificateRequestAgent: CERTIFICATE_REQUEST_AGENT
ClientAuthentication: CLIENT_AUTHENTICATION
CodeSigning: CODE_SIGNING
CtlUsage: CTL_USAGE
DigitalRights: DIGITAL_RIGHTS
DirectoryServiceEmailReplication: DIRECTORY_SERVICE_EMAIL_REPLICATION
DisallowedList: DISALLOWED_LIST
DnsServerTrust: DNS_SERVER_TRUST
DocumentEncryption: DOCUMENT_ENCRYPTION
DocumentSigning: DOCUMENT_SIGNING
DynamicCodeGenerator: DYNAMIC_CODE_GENERATOR
EarlyLaunchAntimalwareDriver: EARLY_LAUNCH_ANTIMALWARE_DRIVER
EmbeddedWindowsSystemComponentVerification: EMBEDDED_WINDOWS_SYSTEM_COMPONENT_VERIFICATION
Enclave: ENCLAVE
EncryptingFileSystem: ENCRYPTING_FILE_SYSTEM
EndorsementKeyCertificate: ENDORSEMENT_KEY_CERTIFICATE
FileRecovery: FILE_RECOVERY
HalExtension: HAL_EXTENSION
IpSecurityEndSystem: IP_SECURITY_END_SYSTEM
IpSecurityIkeIntermediate: IP_SECURITY_IKE_INTERMEDIATE
IpSecurityTunnelTermination: IP_SECURITY_TUNNEL_TERMINATION
IpSecurityUser: IP_SECURITY_USER
IsolatedUserMode: ISOLATED_USER_MODE
KdcAuthentication: KDC_AUTHENTICATION
KernelModeCodeSigning: KERNEL_MODE_CODE_SIGNING
KeyPackLicenses: KEY_PACK_LICENSES
KeyRecovery: KEY_RECOVERY
KeyRecoveryAgent: KEY_RECOVERY_AGENT
LicenseServerVerification: LICENSE_SERVER_VERIFICATION
LifetimeSigning: LIFETIME_SIGNING
MicrosoftPublisher: MICROSOFT_PUBLISHER
MicrosoftTimeStamping: MICROSOFT_TIME_STAMPING
MicrosoftTrustListSigning: MICROSOFT_TRUST_LIST_SIGNING
OcspSigning: OCSP_SIGNING
OemWindowsSystemComponentVerification: OEM_WINDOWS_SYSTEM_COMPONENT_VERIFICATION
PlatformCertificate: PLATFORM_CERTIFICATE
PreviewBuildSigning: PREVIEW_BUILD_SIGNING
PrivateKeyArchival: PRIVATE_KEY_ARCHIVAL
ProtectedProcessLightVerification: PROTECTED_PROCESS_LIGHT_VERIFICATION
ProtectedProcessVerification: PROTECTED_PROCESS_VERIFICATION
QualifiedSubordination: QUALIFIED_SUBORDINATION
RevokedListSigner: REVOKED_LIST_SIGNER
RootProgramAutoUpdateCaRevocation: ROOT_PROGRAM_AUTO_UPDATE_CA_REVOCATION
RootProgramAutoUpdateEndRevocation: ROOT_PROGRAM_AUTO_UPDATE_END_REVOCATION
RootProgramNoOscpFailoverToCrl: ROOT_PROGRAM_NO_OSCP_FAILOVER_TO_CRL
RootListSigner: ROOT_LIST_SIGNER
SecureEmail: SECURE_EMAIL
ServerAuthentication: SERVER_AUTHENTICATION
SmartCardLogin: SMART_CARD_LOGIN
SpcEncryptedDigestRetryCount: SPC_ENCRYPTED_DIGEST_RETRY_COUNT
SpcRelaxedPeMarkerCheck: SPC_RELAXED_PE_MARKER_CHECK
TimeStamping: TIME_STAMPING
WindowsHardwareDriverAttestedVerification: WINDOWS_HARDWARE_DRIVER_ATTESTED_VERIFICATION
WindowsHardwareDriverExtendedVerification: WINDOWS_HARDWARE_DRIVER_EXTENDED_VERIFICATION
WindowsHardwareDriverVerification: WINDOWS_HARDWARE_DRIVER_VERIFICATION
WindowsHelloRecoveryKeyEncryption: WINDOWS_HELLO_RECOVERY_KEY_ENCRYPTION
WindowsKitsComponent: WINDOWS_KITS_COMPONENT
WindowsRtVerification: WINDOWS_RT_VERIFICATION
WindowsSoftwareExtensionVerification: WINDOWS_SOFTWARE_EXTENSION_VERIFICATION
WindowsStore: WINDOWS_STORE
WindowsSystemComponentVerification: WINDOWS_SYSTEM_COMPONENT_VERIFICATION
WindowsTcbComponent: WINDOWS_TCB_COMPONENT
WindowsThirdPartyApplicationComponent: WINDOWS_THIRD_PARTY_APPLICATION_COMPONENT
WindowsUpdate: WINDOWS_UPDATE

AllApplicationPolicies: ALL_APPLICATION_POLICIES
AnyPurpose: ANY_PURPOSE
AttestationIdentityKeyCertificate: ATTESTATION_IDENTITY_KEY_CERTIFICATE
CertificateRequestAgent: CERTIFICATE_REQUEST_AGENT
ClientAuthentication: CLIENT_AUTHENTICATION
CodeSigning: CODE_SIGNING
CtlUsage: CTL_USAGE
DigitalRights: DIGITAL_RIGHTS
DirectoryServiceEmailReplication: DIRECTORY_SERVICE_EMAIL_REPLICATION
DisallowedList: DISALLOWED_LIST
DnsServerTrust: DNS_SERVER_TRUST
DocumentEncryption: DOCUMENT_ENCRYPTION
DocumentSigning: DOCUMENT_SIGNING
DynamicCodeGenerator: DYNAMIC_CODE_GENERATOR
EarlyLaunchAntimalwareDriver: EARLY_LAUNCH_ANTIMALWARE_DRIVER
EmbeddedWindowsSystemComponentVerification: EMBEDDED_WINDOWS_SYSTEM_COMPONENT_VERIFICATION
Enclave: ENCLAVE
EncryptingFileSystem: ENCRYPTING_FILE_SYSTEM
EndorsementKeyCertificate: ENDORSEMENT_KEY_CERTIFICATE
FileRecovery: FILE_RECOVERY
HalExtension: HAL_EXTENSION
IpSecurityEndSystem: IP_SECURITY_END_SYSTEM
IpSecurityIkeIntermediate: IP_SECURITY_IKE_INTERMEDIATE
IpSecurityTunnelTermination: IP_SECURITY_TUNNEL_TERMINATION
IpSecurityUser: IP_SECURITY_USER
IsolatedUserMode: ISOLATED_USER_MODE
KdcAuthentication: KDC_AUTHENTICATION
KernelModeCodeSigning: KERNEL_MODE_CODE_SIGNING
KeyPackLicenses: KEY_PACK_LICENSES
KeyRecovery: KEY_RECOVERY
KeyRecoveryAgent: KEY_RECOVERY_AGENT
LicenseServerVerification: LICENSE_SERVER_VERIFICATION
LifetimeSigning: LIFETIME_SIGNING
MicrosoftPublisher: MICROSOFT_PUBLISHER
MicrosoftTimeStamping: MICROSOFT_TIME_STAMPING
MicrosoftTrustListSigning: MICROSOFT_TRUST_LIST_SIGNING
OcspSigning: OCSP_SIGNING
OemWindowsSystemComponentVerification: OEM_WINDOWS_SYSTEM_COMPONENT_VERIFICATION
PlatformCertificate: PLATFORM_CERTIFICATE
PreviewBuildSigning: PREVIEW_BUILD_SIGNING
PrivateKeyArchival: PRIVATE_KEY_ARCHIVAL
ProtectedProcessLightVerification: PROTECTED_PROCESS_LIGHT_VERIFICATION
ProtectedProcessVerification: PROTECTED_PROCESS_VERIFICATION
QualifiedSubordination: QUALIFIED_SUBORDINATION
RevokedListSigner: REVOKED_LIST_SIGNER
RootProgramAutoUpdateCaRevocation: ROOT_PROGRAM_AUTO_UPDATE_CA_REVOCATION
RootProgramAutoUpdateEndRevocation: ROOT_PROGRAM_AUTO_UPDATE_END_REVOCATION
RootProgramNoOscpFailoverToCrl: ROOT_PROGRAM_NO_OSCP_FAILOVER_TO_CRL
RootListSigner: ROOT_LIST_SIGNER
SecureEmail: SECURE_EMAIL
ServerAuthentication: SERVER_AUTHENTICATION
SmartCardLogin: SMART_CARD_LOGIN
SpcEncryptedDigestRetryCount: SPC_ENCRYPTED_DIGEST_RETRY_COUNT
SpcRelaxedPeMarkerCheck: SPC_RELAXED_PE_MARKER_CHECK
TimeStamping: TIME_STAMPING
WindowsHardwareDriverAttestedVerification: WINDOWS_HARDWARE_DRIVER_ATTESTED_VERIFICATION
WindowsHardwareDriverExtendedVerification: WINDOWS_HARDWARE_DRIVER_EXTENDED_VERIFICATION
WindowsHardwareDriverVerification: WINDOWS_HARDWARE_DRIVER_VERIFICATION
WindowsHelloRecoveryKeyEncryption: WINDOWS_HELLO_RECOVERY_KEY_ENCRYPTION
WindowsKitsComponent: WINDOWS_KITS_COMPONENT
WindowsRtVerification: WINDOWS_RT_VERIFICATION
WindowsSoftwareExtensionVerification: WINDOWS_SOFTWARE_EXTENSION_VERIFICATION
WindowsStore: WINDOWS_STORE
WindowsSystemComponentVerification: WINDOWS_SYSTEM_COMPONENT_VERIFICATION
WindowsTcbComponent: WINDOWS_TCB_COMPONENT
WindowsThirdPartyApplicationComponent: WINDOWS_THIRD_PARTY_APPLICATION_COMPONENT
WindowsUpdate: WINDOWS_UPDATE

ALL_APPLICATION_POLICIES: ALL_APPLICATION_POLICIES
ANY_PURPOSE: ANY_PURPOSE
ATTESTATION_IDENTITY_KEY_CERTIFICATE: ATTESTATION_IDENTITY_KEY_CERTIFICATE
CERTIFICATE_REQUEST_AGENT: CERTIFICATE_REQUEST_AGENT
CLIENT_AUTHENTICATION: CLIENT_AUTHENTICATION
CODE_SIGNING: CODE_SIGNING
CTL_USAGE: CTL_USAGE
DIGITAL_RIGHTS: DIGITAL_RIGHTS
DIRECTORY_SERVICE_EMAIL_REPLICATION: DIRECTORY_SERVICE_EMAIL_REPLICATION
DISALLOWED_LIST: DISALLOWED_LIST
DNS_SERVER_TRUST: DNS_SERVER_TRUST
DOCUMENT_ENCRYPTION: DOCUMENT_ENCRYPTION
DOCUMENT_SIGNING: DOCUMENT_SIGNING
DYNAMIC_CODE_GENERATOR: DYNAMIC_CODE_GENERATOR
EARLY_LAUNCH_ANTIMALWARE_DRIVER: EARLY_LAUNCH_ANTIMALWARE_DRIVER
EMBEDDED_WINDOWS_SYSTEM_COMPONENT_VERIFICATION: EMBEDDED_WINDOWS_SYSTEM_COMPONENT_VERIFICATION
ENCLAVE: ENCLAVE
ENCRYPTING_FILE_SYSTEM: ENCRYPTING_FILE_SYSTEM
ENDORSEMENT_KEY_CERTIFICATE: ENDORSEMENT_KEY_CERTIFICATE
FILE_RECOVERY: FILE_RECOVERY
HAL_EXTENSION: HAL_EXTENSION
IP_SECURITY_END_SYSTEM: IP_SECURITY_END_SYSTEM
IP_SECURITY_IKE_INTERMEDIATE: IP_SECURITY_IKE_INTERMEDIATE
IP_SECURITY_TUNNEL_TERMINATION: IP_SECURITY_TUNNEL_TERMINATION
IP_SECURITY_USER: IP_SECURITY_USER
ISOLATED_USER_MODE: ISOLATED_USER_MODE
KDC_AUTHENTICATION: KDC_AUTHENTICATION
KERNEL_MODE_CODE_SIGNING: KERNEL_MODE_CODE_SIGNING
KEY_PACK_LICENSES: KEY_PACK_LICENSES
KEY_RECOVERY: KEY_RECOVERY
KEY_RECOVERY_AGENT: KEY_RECOVERY_AGENT
LICENSE_SERVER_VERIFICATION: LICENSE_SERVER_VERIFICATION
LIFETIME_SIGNING: LIFETIME_SIGNING
MICROSOFT_PUBLISHER: MICROSOFT_PUBLISHER
MICROSOFT_TIME_STAMPING: MICROSOFT_TIME_STAMPING
MICROSOFT_TRUST_LIST_SIGNING: MICROSOFT_TRUST_LIST_SIGNING
OCSP_SIGNING: OCSP_SIGNING
OEM_WINDOWS_SYSTEM_COMPONENT_VERIFICATION: OEM_WINDOWS_SYSTEM_COMPONENT_VERIFICATION
PLATFORM_CERTIFICATE: PLATFORM_CERTIFICATE
PREVIEW_BUILD_SIGNING: PREVIEW_BUILD_SIGNING
PRIVATE_KEY_ARCHIVAL: PRIVATE_KEY_ARCHIVAL
PROTECTED_PROCESS_LIGHT_VERIFICATION: PROTECTED_PROCESS_LIGHT_VERIFICATION
PROTECTED_PROCESS_VERIFICATION: PROTECTED_PROCESS_VERIFICATION
QUALIFIED_SUBORDINATION: QUALIFIED_SUBORDINATION
REVOKED_LIST_SIGNER: REVOKED_LIST_SIGNER
ROOT_PROGRAM_AUTO_UPDATE_CA_REVOCATION: ROOT_PROGRAM_AUTO_UPDATE_CA_REVOCATION
ROOT_PROGRAM_AUTO_UPDATE_END_REVOCATION: ROOT_PROGRAM_AUTO_UPDATE_END_REVOCATION
ROOT_PROGRAM_NO_OSCP_FAILOVER_TO_CRL: ROOT_PROGRAM_NO_OSCP_FAILOVER_TO_CRL
ROOT_LIST_SIGNER: ROOT_LIST_SIGNER
SECURE_EMAIL: SECURE_EMAIL
SERVER_AUTHENTICATION: SERVER_AUTHENTICATION
SMART_CARD_LOGIN: SMART_CARD_LOGIN
SPC_ENCRYPTED_DIGEST_RETRY_COUNT: SPC_ENCRYPTED_DIGEST_RETRY_COUNT
SPC_RELAXED_PE_MARKER_CHECK: SPC_RELAXED_PE_MARKER_CHECK
TIME_STAMPING: TIME_STAMPING
WINDOWS_HARDWARE_DRIVER_ATTESTED_VERIFICATION: WINDOWS_HARDWARE_DRIVER_ATTESTED_VERIFICATION
WINDOWS_HARDWARE_DRIVER_EXTENDED_VERIFICATION: WINDOWS_HARDWARE_DRIVER_EXTENDED_VERIFICATION
WINDOWS_HARDWARE_DRIVER_VERIFICATION: WINDOWS_HARDWARE_DRIVER_VERIFICATION
WINDOWS_HELLO_RECOVERY_KEY_ENCRYPTION: WINDOWS_HELLO_RECOVERY_KEY_ENCRYPTION
WINDOWS_KITS_COMPONENT: WINDOWS_KITS_COMPONENT
WINDOWS_RT_VERIFICATION: WINDOWS_RT_VERIFICATION
WINDOWS_SOFTWARE_EXTENSION_VERIFICATION: WINDOWS_SOFTWARE_EXTENSION_VERIFICATION
WINDOWS_STORE: WINDOWS_STORE
WINDOWS_SYSTEM_COMPONENT_VERIFICATION: WINDOWS_SYSTEM_COMPONENT_VERIFICATION
WINDOWS_TCB_COMPONENT: WINDOWS_TCB_COMPONENT
WINDOWS_THIRD_PARTY_APPLICATION_COMPONENT: WINDOWS_THIRD_PARTY_APPLICATION_COMPONENT
WINDOWS_UPDATE: WINDOWS_UPDATE

"ALL_APPLICATION_POLICIES": ALL_APPLICATION_POLICIES
"ANY_PURPOSE": ANY_PURPOSE
"ATTESTATION_IDENTITY_KEY_CERTIFICATE": ATTESTATION_IDENTITY_KEY_CERTIFICATE
"CERTIFICATE_REQUEST_AGENT": CERTIFICATE_REQUEST_AGENT
"CLIENT_AUTHENTICATION": CLIENT_AUTHENTICATION
"CODE_SIGNING": CODE_SIGNING
"CTL_USAGE": CTL_USAGE
"DIGITAL_RIGHTS": DIGITAL_RIGHTS
"DIRECTORY_SERVICE_EMAIL_REPLICATION": DIRECTORY_SERVICE_EMAIL_REPLICATION
"DISALLOWED_LIST": DISALLOWED_LIST
"DNS_SERVER_TRUST": DNS_SERVER_TRUST
"DOCUMENT_ENCRYPTION": DOCUMENT_ENCRYPTION
"DOCUMENT_SIGNING": DOCUMENT_SIGNING
"DYNAMIC_CODE_GENERATOR": DYNAMIC_CODE_GENERATOR
"EARLY_LAUNCH_ANTIMALWARE_DRIVER": EARLY_LAUNCH_ANTIMALWARE_DRIVER
"EMBEDDED_WINDOWS_SYSTEM_COMPONENT_VERIFICATION": EMBEDDED_WINDOWS_SYSTEM_COMPONENT_VERIFICATION
"ENCLAVE": ENCLAVE
"ENCRYPTING_FILE_SYSTEM": ENCRYPTING_FILE_SYSTEM
"ENDORSEMENT_KEY_CERTIFICATE": ENDORSEMENT_KEY_CERTIFICATE
"FILE_RECOVERY": FILE_RECOVERY
"HAL_EXTENSION": HAL_EXTENSION
"IP_SECURITY_END_SYSTEM": IP_SECURITY_END_SYSTEM
"IP_SECURITY_IKE_INTERMEDIATE": IP_SECURITY_IKE_INTERMEDIATE
"IP_SECURITY_TUNNEL_TERMINATION": IP_SECURITY_TUNNEL_TERMINATION
"IP_SECURITY_USER": IP_SECURITY_USER
"ISOLATED_USER_MODE": ISOLATED_USER_MODE
"KDC_AUTHENTICATION": KDC_AUTHENTICATION
"KERNEL_MODE_CODE_SIGNING": KERNEL_MODE_CODE_SIGNING
"KEY_PACK_LICENSES": KEY_PACK_LICENSES
"KEY_RECOVERY": KEY_RECOVERY
"KEY_RECOVERY_AGENT": KEY_RECOVERY_AGENT
"LICENSE_SERVER_VERIFICATION": LICENSE_SERVER_VERIFICATION
"LIFETIME_SIGNING": LIFETIME_SIGNING
"MICROSOFT_PUBLISHER": MICROSOFT_PUBLISHER
"MICROSOFT_TIME_STAMPING": MICROSOFT_TIME_STAMPING
"MICROSOFT_TRUST_LIST_SIGNING": MICROSOFT_TRUST_LIST_SIGNING
"OCSP_SIGNING": OCSP_SIGNING
"OEM_WINDOWS_SYSTEM_COMPONENT_VERIFICATION": OEM_WINDOWS_SYSTEM_COMPONENT_VERIFICATION
"PLATFORM_CERTIFICATE": PLATFORM_CERTIFICATE
"PREVIEW_BUILD_SIGNING": PREVIEW_BUILD_SIGNING
"PRIVATE_KEY_ARCHIVAL": PRIVATE_KEY_ARCHIVAL
"PROTECTED_PROCESS_LIGHT_VERIFICATION": PROTECTED_PROCESS_LIGHT_VERIFICATION
"PROTECTED_PROCESS_VERIFICATION": PROTECTED_PROCESS_VERIFICATION
"QUALIFIED_SUBORDINATION": QUALIFIED_SUBORDINATION
"REVOKED_LIST_SIGNER": REVOKED_LIST_SIGNER
"ROOT_PROGRAM_AUTO_UPDATE_CA_REVOCATION": ROOT_PROGRAM_AUTO_UPDATE_CA_REVOCATION
"ROOT_PROGRAM_AUTO_UPDATE_END_REVOCATION": ROOT_PROGRAM_AUTO_UPDATE_END_REVOCATION
"ROOT_PROGRAM_NO_OSCP_FAILOVER_TO_CRL": ROOT_PROGRAM_NO_OSCP_FAILOVER_TO_CRL
"ROOT_LIST_SIGNER": ROOT_LIST_SIGNER
"SECURE_EMAIL": SECURE_EMAIL
"SERVER_AUTHENTICATION": SERVER_AUTHENTICATION
"SMART_CARD_LOGIN": SMART_CARD_LOGIN
"SPC_ENCRYPTED_DIGEST_RETRY_COUNT": SPC_ENCRYPTED_DIGEST_RETRY_COUNT
"SPC_RELAXED_PE_MARKER_CHECK": SPC_RELAXED_PE_MARKER_CHECK
"TIME_STAMPING": TIME_STAMPING
"WINDOWS_HARDWARE_DRIVER_ATTESTED_VERIFICATION": WINDOWS_HARDWARE_DRIVER_ATTESTED_VERIFICATION
"WINDOWS_HARDWARE_DRIVER_EXTENDED_VERIFICATION": WINDOWS_HARDWARE_DRIVER_EXTENDED_VERIFICATION
"WINDOWS_HARDWARE_DRIVER_VERIFICATION": WINDOWS_HARDWARE_DRIVER_VERIFICATION
"WINDOWS_HELLO_RECOVERY_KEY_ENCRYPTION": WINDOWS_HELLO_RECOVERY_KEY_ENCRYPTION
"WINDOWS_KITS_COMPONENT": WINDOWS_KITS_COMPONENT
"WINDOWS_RT_VERIFICATION": WINDOWS_RT_VERIFICATION
"WINDOWS_SOFTWARE_EXTENSION_VERIFICATION": WINDOWS_SOFTWARE_EXTENSION_VERIFICATION
"WINDOWS_STORE": WINDOWS_STORE
"WINDOWS_SYSTEM_COMPONENT_VERIFICATION": WINDOWS_SYSTEM_COMPONENT_VERIFICATION
"WINDOWS_TCB_COMPONENT": WINDOWS_TCB_COMPONENT
"WINDOWS_THIRD_PARTY_APPLICATION_COMPONENT": WINDOWS_THIRD_PARTY_APPLICATION_COMPONENT
"WINDOWS_UPDATE": WINDOWS_UPDATE