PKI code (3.3x) will run on eDirectory, but the following
new features are supported only in eDirectory 8.8.x and above:
Certificate Server creation of CRL distribution points.
Functionality that creates and uses PKI Container object(s).
Functionality that creates and uses CRL Configuration object(s).
Functionality that creates and uses CRL Distribution Point object(s).
Issuing CRLs.
Revocation of certificates.
Support for Subordinate CAs; that is, having the Organizational
CA be subordinate to either a third-party CA or another eDirectory
tree.
Support for 4096 bit key size; that is, support for key sizes
greater than 2048 bits.
Note: Although the new features listed above might work on
eDirectory 8.7x, they have only been tested and are officially
supported on eDirectory 8.8x and above.