3.2.1.4.2.1.4.6.4 Creating a Serial Number String

Follow these steps to create a serial number string:

  1. Generate a number R defined in section 3.2.1.4.2.1.4.6 using any pseudo random number generator.

  2. Convert the number to a string form where each byte is represented in a hexadecimal form by two characters starting from high byte to low. For example, "1f2cd56a8293f8a0".

  3. Set the value of the Config_High_Serial_String to the string generated in the previous step.

  4. If the CA implements the Certificate Services Remote Administration Protocol [MS-CSRA] protocol, write the value generated in step 2 to the OnNextRestart_Config_High_Serial_String persisted datum. If the CA does not implement Certificate Services Remote Administration Protocol [MS-CSRA], write the value to the implementation specific storage.