From 999d1aab41240044227bf9912df4d111ba36f46c Mon Sep 17 00:00:00 2001 From: Vadims Podans Date: Sun, 16 Apr 2023 20:38:15 +0300 Subject: [PATCH] Update installation.md --- docs/installation.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/docs/installation.md b/docs/installation.md index 1481e51..0b4f20b 100644 --- a/docs/installation.md +++ b/docs/installation.md @@ -11,6 +11,7 @@ Policy module is based on top of COM interfaces and must be registered in operating system in order to be visible to CA. Package contains an `Install-PolicyModule.ps1` PowerShell script that performs COM object registration and (optionally) policy module assignment to CA. `Install-PolicyModule.ps1` script has the following parameters: - `-Path` -- specifies the path to a policy module file, which is `ADCS.SidExtension.PolicyModule.dll` +- `-RegisterOnly` -- performs COM component registration only. This parameter must be used when updating policy module to a newer version. - `-AddToCA` -- a switch parameter that assigns this policy module on CA as current policy module. - `-Restart` -- a switch parameter that restarts CA service to immediately apply changes. This switch is used along with `-AddToCA`. @@ -25,6 +26,12 @@ If you want to register COM objects and configure policy module as active on CA: .\Install-PolicyModule -Path "C:\CA\Policy Modules\ADCS.SidExtension.PolicyModule.dll" -AddToCA -Restart ``` +Use the following command if you are updating policy module to a newer version: +**Note:** you must stop CA service during policy module upgrade. +```PowerShell +.\Install-PolicyModule -RegisterOnly +``` + ## Configure CA to use new policy module 1. Log on to CA with CA Administrator permissions; 2. Launch Certification Authority MMC snap-in (`certsrv.msc`);