Configuring the certificate purpose

  • Article

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Configuring the certificate purpose

The certificate purpose defines the intended primary use of the certificate. The certificate purpose can be one of three settings:

Purpose Uses

Encryption

Used for encrypting data. A certificate with this purpose will contain cryptographic keys for encryption and decryption.

Signature

Used to digitally sign data. A certificate with this purpose will contain cryptographic keys for signing data only.

Signature and encryption

Used to either digitally sign data, digitally encrypt data, or both. This certificate purpose covers all primary uses of a certificate's cryptographic key.

Signature and smartcard logon

Used for initial logon with a smart card and to digitally sign data. A certificate with this purpose cannot be used for data encryption.