Control ID: CA-TEMPLATE-004
Control Name: Template CSP (Cryptographic Service Provider) Validation
Severity: Critical
Status: Failure
Certificate Authority: Securetron-Lab-ROOT-CA
Execution Time: 2025-10-15 22:43:13
Duration: 00:00:00.0212355

Expected Result:
Certificate templates should use approved CSPs and avoid weak prohibited CSPs

Evidence:
Template CSP Analysis for Securetron-Lab-ROOT-CA:
  Templates Found: 3
  Approved CSPs:  (from parameters.json)
  Prohibited CSPs: Microsoft Enhanced Cryptographic Provider v1.0, Microsoft Enhanced Cryptographic Provider (from parameters.json)
  Non-Compliant Templates: 2

Template CSP Usage:
  ✓ Securetron-TLS: Microsoft Software Key Storage Provider (COMPLIANT)
  ✗ Copy of Subordinate Certification Authority: Microsoft Enhanced Cryptographic Provider v1.0 (NON-COMPLIANT)
  ✗ SubCA: Microsoft Enhanced Cryptographic Provider v1.0 (NON-COMPLIANT)

Validation Results:
  Compliant Templates: 1
  Non-Compliant Templates: 2
  Overall: NON-COMPLIANT


Recommendation:
Update the following templates to use approved CSPs and avoid prohibited CSPs: Copy of Subordinate Certification Authority, SubCA
