Whisker

A Windows C# utility for listing, adding, removing, or clearing msDS-KeyCredentialLink entries on Active Directory user and computer objects. Adding a key credential enables certificate-backed Kerberos PKINIT authentication as the target without its account password, when the domain controller supports PKINIT; the change requires write permission on the attribute and can persist through password changes.