@@ -767,6 +767,7 @@ await compStatusChannel.Writer.WriteAsync(new CSVComputerStatus
767767 var enrollmentAgentRestrictionsCollected = false ;
768768 var isUserSpecifiesSanEnabledCollected = false ;
769769 var roleSeparationEnabledCollected = false ;
770+ var rPCEncryptionCollected = false ;
770771 var caName = entry . GetProperty ( LDAPProperties . Name ) ;
771772 var dnsHostName = entry . GetProperty ( LDAPProperties . DNSHostName ) ;
772773 if ( caName != null && dnsHostName != null ) {
@@ -789,6 +790,7 @@ await compStatusChannel.Writer.WriteAsync(new CSVComputerStatus
789790 EnrollmentAgentRestrictions = await _certAbuseProcessor . ProcessEAPermissions ( caName ,
790791 resolvedSearchResult . Domain , dnsHostName , ret . HostingComputer ) ,
791792 RoleSeparationEnabled = _certAbuseProcessor . RoleSeparationEnabled ( dnsHostName , caName ) ,
793+ RPCEncryptionEnforced = _certAbuseProcessor . RPCEncryptionEnforced ( dnsHostName , caName ) ,
792794
793795 // The CASecurity exist in the AD object DACL and in registry of the CA server. We prefer to use the values from registry as they are the ground truth.
794796 // If changes are made on the CA server, registry and the AD object is updated. If changes are made directly on the AD object, the CA server registry is not updated.
@@ -800,6 +802,7 @@ await compStatusChannel.Writer.WriteAsync(new CSVComputerStatus
800802 enrollmentAgentRestrictionsCollected = cARegistryData . EnrollmentAgentRestrictions . Collected ;
801803 isUserSpecifiesSanEnabledCollected = cARegistryData . IsUserSpecifiesSanEnabled . Collected ;
802804 roleSeparationEnabledCollected = cARegistryData . RoleSeparationEnabled . Collected ;
805+ rPCEncryptionCollected = cARegistryData . RPCEncryptionEnforced . Collected ;
803806 ret . CARegistryData = cARegistryData ;
804807 } else {
805808 _log . LogWarning ( "The CA name or dnsHostname properties are null." ) ;
@@ -809,6 +812,7 @@ await compStatusChannel.Writer.WriteAsync(new CSVComputerStatus
809812 ret . Properties . Add ( "enrollmentagentrestrictionscollected" , enrollmentAgentRestrictionsCollected ) ;
810813 ret . Properties . Add ( "isuserspecifiessanenabledcollected" , isUserSpecifiesSanEnabledCollected ) ;
811814 ret . Properties . Add ( "roleseparationenabledcollected" , roleSeparationEnabledCollected ) ;
815+ ret . Properties . Add ( "rpcencryptioncollected" , rPCEncryptionCollected ) ;
812816 }
813817
814818 return ret ;
0 commit comments