CEnroll object

Accepts and processes a PKCS #7 message containing a certificate, then stores the message to a file.

Accepts delivery of the credentials issued in response to an earlier call to createFileRequest, and it places the credentials in the appropriate store.

Accepts and processes a PKCS #7 message containing a certificate. The PKCS #7 is input as a parameter.

Accepts delivery of the credentials issued in response to an earlier call to createRequest and places the credentials in the appropriate store.

Adds an attribute to the certificate request.

Adds a certificate template to a request (used to support the enterprise certification authority (CA)).

Adds a certificate template (or "certificate type") to a request.

Adds an extension to the request.

Adds a name-value string pair to the request.

Adds the name and value pair of an attribute to the request. It is up to the CA to interpret the meaning of the name-value pair.

Adds a name-value string pair to the signature.

Converts a binary data BLOB to a string.

Saves the accepted certificate chain and private key in a file in Personal Information Exchange (PFX) format.

Creates a base64-encoded PKCS #10 certificate request and saves it in a file.

Creates a PKCS #10 certificate request, a PKCS #7 request, or a full Certificate Management over CMS (CMC) request and stores it in a file.

Saves the accepted certificate chain and private key in a PFX format string. The PFX format is also known as PKCS #12.

Creates a base64-encoded PKCS #10 certificate request.

Creates a PKCS #10, PKCS #7, or full CMC format certificate request and stores it in a string.

Retrieves the IDs of cryptographic algorithms in a given algorithm class that are supported by the current CSP.

Retrieves the names of the containers for the cryptographic service provider (CSP) specified by the ProviderName property.

Enumerates pending certificate requests and retrieves a specified property from each.

Retrieves the names of the available CSPs specified by the ProviderType property.

Cleans up the stores if an error occurs. Currently not implemented.

Retrieves the name of a cryptographic algorithm given its ID. The values retrieved by this method depend on the current CSP.

Retrieves the certificate from a file containing a response from a CA.

Retrieves the certificate, contained in a PKCS #7 message, that was issued in response to a PKCS #10 certificate request.

Retrieves the certificate from a CA's response.

Retrieves the minimum and maximum key lengths for the signature and exchange keys.

Retrieves size information for the signature and exchange keys.

Retrieves the type of the specified CSP.

Retrieves information regarding the CSP's support for signature or exchange keys.

Processes a certificate or chain of certificates, placing them into the appropriate certificate stores. This method differs from the acceptPKCS7 method in that InstallPKCS7 does not receive a request certificate.

The same as InstallPKCS7 except that it returns the number of certificates actually installed in local stores.

Removes a pending request from the client's request store.

Returns the certificate enrollment control object to its initial state.

Removes all attributes from the request.

Removes all extensions from the request.

Sets properties for a pending request.

Converts an encoded string to a binary data BLOB.

CAStoreFlags

Sets or retrieves a flag that controls the certificate store when it is opened.

CAStoreName

Sets or retrieves the name of the store where all non-"ROOT" and non-"MY" certificates are kept.

CAStoreType

Sets or retrieves the type of store to use for the store specified by the CAStoreName property.

ClientId

Sets or retrieves the client ID request attribute.

ContainerName

Sets or retrieves the name of the key container to use.

DeleteRequestCert

Sets or retrieves a Boolean indicator that controls whether dummy certificates in the request store are deleted.

EnableSMIMECapabilities

Sets or retrieves a Boolean value that controls whether the PKCS10 will contain a signed attribute for Secure/Multipurpose Internet Mail Extensions (S/MIME) capabilities.

EnableT61DNEncoding

Sets or retrieves a Boolean value that controls whether the distinguished name in the request is encoded as a T61 string instead of as a UNICODE string.

GenKeyFlags

Sets or retrieves a flag that controls whether a private key is exportable.

HashAlgID

Sets or retrieves the hash algorithm used when signing a PKCS #10 certificate request.

HashAlgorithm

Sets or retrieves only the signature hash algorithm used to sign the PKCS #10.

IncludeSubjectKeyID

Sets or retrieves a Boolean value that controls whether a subject key identifier extension is included in the certificate request.

KeySpec

Sets or retrieves the type of key generated.

LimitExchangeKeyToEncipherment

Sets or retrieves a Boolean value that controls whether an AT_KEYEXCHANGE request contains digital signature and non-repudiation key usages.

MyStoreFlags

Sets the registry location used for the MY store.

MyStoreName

Sets or retrieves the name of the store where certificates with linked private keys are kept.

MyStoreType

Sets or retrieves the type of store specified by the MyStoreName property.

PrivateKeyArchiveCertificate

Sets or retrieves the certificate that is used to archive a private key with a PKCS #7 or CMC request.

ProviderFlags

Sets or retrieves the CSP type.

ProviderName

Sets or retrieves the name of the CSP to use.

ProviderType

Sets or retrieves the type of provider.

PVKFileName

Sets or retrieves the name of the file that will contain exported keys.

RequestStoreFlags

Sets or retrieves the registry location used for the REQUEST store.

RequestStoreName

Sets or retrieves the name of the store that contains the dummy certificate. This dummy certificate, along with the added private keys, remains in the request store until a certification authority processes the request and responds with a PKCS #7.

RequestStoreType

Sets or retrieves the type of store to use for the store specified by the RequestStoreName property.

ReuseHardwareKeyIfUnableToGenNew

Sets or retrieves a Boolean value that determines the action taken by the certificate enrollment control object if an error is encountered when generating a new key.

RootStoreFlags

Sets or retrieves the registry location used for the ROOT store.

RootStoreName

Sets or retrieves the name of the root store where all intrinsically trusted self-signed ROOT certificates are kept.

RootStoreType

Sets or retrieves the type of store to use for the store specified by the RootStoreName property.

SignerCertificate

Sets the signing certificate.

SPCFileName

Sets or retrieves the name of the file to write the resulting base64-encoded PKCS #7 (in BSTR form) as returned from the certification authority.

ThumbPrint

Sets or retrieves a hash of the certificate data.

UseExistingKeySet

Sets or retrieves a Boolean value that indicates whether the existing keys should be used.

WriteCertToCSP

Sets or retrieves a Boolean value that indicates whether a certificate should be written to the CSP.

WriteCertToUserDS

Sets or retrieves a Boolean value that controls whether the certificate is written to the user's Active Directory store.