Policy Module Customization
Certpdef.dll is the default policy module, and is installed during Certificate Server setup. A new policy module can be installed at any time using the following procedure.
To install a new policy module
Stop the Certificate Authority service using the Services applet in the Windows NT Control Panel.
Run RegSvr32 with the /u option to remove the existing policy module DLL.. For example, to remove the default policy module enter:
regsvr32 /u certpdef.dll
Run RegSvr32 on the new policy module DLL. For example, to install a policy module named mypolicy.dll enter:
Restart the Certificate Authority service using the Services applet in the Windows NT Control Panel, and the new policy module will be invoked for any new certificate request.
Note You must install another policy module after removing the existing one before attempting to restart the Certificate Authority service. If no policy module has been installed and Certificate Authority is started, it will log an error event and exit.