Policy

Specify minimum XAdES level for digital signature generation

This policy setting lets you specify a minimum XAdES level that Office 2016 applications must reach in order to create an XAdES digital signature. If unable to reach the minimum XAdESLevel, the Office application fails to create the signature. If you enable this policy setting, you can set the following minimum XAdES levels that must be met by the Office application before creating the digital signature. - No minimum level - XAdES-BES: Must create at least XAdES-BES or fail - XAdES-T: Must create at least XAdES-T (timestamp) or fail. - XAdES-C: Must create at least XAdES-C (certificate and revocation references) or fail. - XAdES-X: Must create at least XAdES-X (timestamp -C) or fail. - XAdES-X-L: Must create at least XAdES-X-L (store certificate and revocation values) or fail. If you disable or do not configure this policy setting, Office 2016 does not require a minimum XAdES level and creates the most advanced XAdES signature possible, up to the level specified in the policy setting

Policy
Pack Microsoft Office
Category Microsoft Office 2016 / Security Settings / Digital Signatures
Policy ID 0b18fc6b1a55
Internal name L_SpecifyMinimumXAdESLevelForDigitalSignatureGeneration

Registry

Copy registry mappings

HKCU\software\policies\microsoft\office\16.0\common\signatures\minxadeslevel

Policy notes

This policy setting lets you specify a minimum XAdES level that Office 2016 applications must reach in order to create an XAdES digital signature. If unable to reach the minimum XAdESLevel, the Office application fails to create the signature. If you enable this policy setting, you can set the following minimum XAdES levels that must be met by the Office application before creating the digital signature. - No minimum level - XAdES-BES: Must create at least XAdES-BES or fail - XAdES-T: Must create at least XAdES-T (timestamp) or fail. - XAdES-C: Must create at least XAdES-C (certificate and revocation references) or fail. - XAdES-X: Must create at least XAdES-X (timestamp -C) or fail. - XAdES-X-L: Must create at least XAdES-X-L (store certificate and revocation values) or fail. If you disable or do not configure this policy setting, Office 2016 does not require a minimum XAdES level and creates the most advanced XAdES signature possible, up to the level specified in the policy setting

Related policies

Check the XAdES portions of a digital signatureConfigure invalid DSA public key sizeConfigure invalid hashing algorithmConfigure invalid RSA public key sizeConfigure legacy DSA public key sizeConfigure legacy hashing algorithmConfigure legacy RSA public key size