3.1.2.4.2.2.2.1 Certificate.Template.msPKI-Minimal-Key-Size

The client MUST create the key pair with a key length greater than or equal to the value of the Certificate.Template.msPKI-Minimal-Key-Size datum. The client MUST ignore the key length derived by processing the Certificate.Template.pKIDefaultCSPs (section 3.1.2.4.2.2.1.6) datum, as specified in section 3.1.2.4.2.2.1.6.