import { Value } from '../../../cloudformation/Value';
/**
  Template configurations for v4 template schema.
  For full documentation go to <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pcaconnectorad-template-enrollmentflagsv4.html">the AWS Docs</a>
*/
export interface EnrollmentFlagsV4Props {
    /** <code>NoSecurityExtension</code>  <a name="cfn-pcaconnectorad-template-enrollmentflagsv4-nosecurityextension"></a>
  This flag instructs the CA to not include the security extension szOID_NTDS_CA_SECURITY_EXT (OID:1.3.6.1.4.1.311.25.2), as specified in [MS-WCCE] sections 2.2.2.7.7.4 and 3.2.2.6.2.1.4.5.9, in the issued certificate. This addresses a Windows Kerberos elevation-of-privilege vulnerability.<br />
  
  Required: No<br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt">No interruption</a> */
    noSecurityExtension?: Value<boolean>;
    /** <code>IncludeSymmetricAlgorithms</code>  <a name="cfn-pcaconnectorad-template-enrollmentflagsv4-includesymmetricalgorithms"></a>
  Include symmetric algorithms allowed by the subject.<br />
  
  Required: No<br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt">No interruption</a> */
    includeSymmetricAlgorithms?: Value<boolean>;
    /** <code>UserInteractionRequired</code>  <a name="cfn-pcaconnectorad-template-enrollmentflagsv4-userinteractionrequired"></a>
  Require user interaction when the subject is enrolled and the private key associated with the certificate is used.<br />
  
  Required: No<br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt">No interruption</a> */
    userInteractionRequired?: Value<boolean>;
    /** <code>EnableKeyReuseOnNtTokenKeysetStorageFull</code>  <a name="cfn-pcaconnectorad-template-enrollmentflagsv4-enablekeyreuseonnttokenkeysetstoragefull"></a>
  Allow renewal using the same key.<br />
  
  Required: No<br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt">No interruption</a> */
    enableKeyReuseOnNtTokenKeysetStorageFull?: Value<boolean>;
    /** <code>RemoveInvalidCertificateFromPersonalStore</code>  <a name="cfn-pcaconnectorad-template-enrollmentflagsv4-removeinvalidcertificatefrompersonalstore"></a>
  Delete expired or revoked certificates instead of archiving them.<br />
  
  Required: No<br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt">No interruption</a> */
    removeInvalidCertificateFromPersonalStore?: Value<boolean>;
}
