ICEnroll4 interface

Accepts and processes a file that contains a PKCS #7 message containing a certificate.

Accepts delivery of the credentials issued in response to an earlier call to createFileRequest, and it places the credentials in the appropriate store.

Accepts and processes a PKCS #7 message containing a certificate. The PKCS #7 is input as a parameter.

Accepts delivery of the credentials issued in response to an earlier call to createRequest and places the credentials in the appropriate store.

Adds an attribute to the certificate request.

Adds a BLOB property to a certificate.

Adds a certificate template to a request (used to support the enterprise certification authority (CA)).

Adds a certificate template (or "certificate type") to a request.

Adds an extension to the request.

Adds a name-value string pair to the request.

Adds the name and value pair of an attribute to the request. It is up to the CA to interpret the meaning of the name-value pair.

Converts a binary data BLOB to a string.

Saves the accepted certificate chain and private key in a file in Personal Information Exchange (PFX) format.

Creates a base64-encoded PKCS #10 certificate request and saves it in a file.

Creates a PKCS #10 certificate request, a PKCS #7 request, or a full CMC request and stores it in a file.

Saves the accepted certificate chain and private key in a PFX format string. The PFX format is also known as PKCS #12.

Creates a base64-encoded PKCS #10 certificate request.

Creates a PKCS #10, PKCS #7, or full Certificate Management over CMS (CMC) format certificate request and stores it in a string.

Retrieves the IDs of cryptographic algorithms in a given algorithm class that are supported by the current CSP.

Retrieves the names of the containers for the cryptographic service provider (CSP) specified by the ProviderName property.

Enumerates pending certificate requests and retrieves a specified property from each.

Retrieves the names of the available CSPs specified by the ProviderType property.

Cleans up the stores if an error occurs. Currently not implemented.

Retrieves the value of the CAStoreFlags property.

Retrieves the value of the CAStoreName property.

Retrieves the value of the CAStoreType property.

Sets the value of the ClientId property.

Retrieves the value of the ContainerName property.

Retrieves the value of the DeleteRequestCert property.

Sets the value of the EnableSMIMECapabilities property.

Retrieves the value of the EnableT61DNEncoding property.

Retrieves the value of the GenKeyFlags property.

Sets the value of the HashAlgID property.

Retrieves the value of the HashAlgorithm property.

Sets the value of the IncludeSubjectKeyID property.

Retrieves the value of the KeySpec property.

Sets the value of the LimitExchangeKeyToEncipherment property.

Retrieves the value of the MyStoreFlags property.

Retrieves the value of the MyStoreName property.

Retrieves the value of the MyStoreType property.

Sets the value of the PrivateKeyArchiveCertificate property.

Retrieves the value of the ProviderFlags property.

Retrieves the value of the ProviderName property.

Retrieves the value of the ProviderType property.

Retrieves the value of the PVKFileName property.

Retrieves the value of the RequestStoreFlags property.

Retrieves the value of the RequestStoreName property.

Retrieves the value of the RequestStoreType property.

Sets the value of the ReuseHardwareKeyIfUnableToGenNew property.

Retrieves the value of the RootStoreFlags property.

Retrieves the value of the RootStoreName property.

Retrieves the value of the RootStoreType property.

Retrieves the value of the SPCFileName property.

Sets the value of the ThumbPrint property.

Retrieves the value of the UseExistingKeySet property.

Retrieves the value of the WriteCertToCSP property.

Retrieves the value of the WriteCertToUserDS property.

Retrieves the name of a cryptographic algorithm given its ID. The values retrieved by this method depend on the current CSP.

Retrieves the certificate from a file containing a response from a CA.

Retrieves the certificate, contained in a PKCS #7 message, that was issued in response to a PKCS #10 certificate request.

Retrieves the certificate from a CA's response.

Retrieves the minimum and maximum key lengths for the signature and exchange keys.

Retrieves size information for the signature and exchange keys.

Retrieves the type of the specified CSP.

Retrieves information regarding the CSP's support for signature or exchange keys.

Processes a certificate or chain of certificates, placing them into the appropriate certificate stores. This method differs from the acceptPKCS7 method in that InstallPKCS7 does not receive a request certificate.

The same as InstallPKCS7 except that it returns the number of certificates actually installed in local stores.

Sets the value of the MyStoreFlags property.

Sets the value of the CAStoreFlags property.

Sets the value of the CAStoreName property.

Sets the value of the CAStoreType property.

Sets the value of the ClientId property.

Sets the value of the ContainerName property.

Sets the value of the DeleteRequestCert property.

Retrieves the value of the EnableSMIMECapabilities property.

Sets the value of the EnableT61DNEncoding property.

Sets the value of the GenKeyFlags property.

Retrieves the value of the HashAlgID property.

Sets the value of the HashAlgorithm property.

Sets the value of the IncludeSubjectKeyID property.

Sets the value of the KeySpec property.

Retrieves the value of the LimitExchangeKeyToEncipherment property.

Sets the value of the MyStoreName property.

Sets the value of the MyStoreType property.

Retrieves the value of the PrivateKeyArchiveCertificate property.

Sets the value of the ProviderFlags property.

Sets the value of the ProviderName property.

Sets the value of the ProviderType property.

Sets the value of the PVKFileName property.

Sets the value of the RequestStoreFlags property.

Sets the value of the RequestStoreName property.

Sets the value of the RequestStoreType property.

Retrieves the value of the ReuseHardwareKeyIfUnableToGenNew property.

Sets the value of the RootStoreFlags property.

Sets the value of the RootStoreName property.

Sets the value of the RootStoreType property.

Retrieves the value of the SignerCertificate property.

Sets the value of the SPCFileName property.

Retrieves the value of the ThumbPrint property.

Sets the value of the UseExistingKeySet property.

Sets the value of the WriteCertToCSP property.

Sets the value of the WriteCertToUserDS property.

Removes a pending request from the client's request store.

Returns the certificate enrollment control object to its initial state.

Removes all attributes from the request.

Resets the properties of a BLOB.

Removes all extensions from the request.

Sets properties for a pending request.

Converts an encoded string to a binary data BLOB.

CAStoreFlags

Sets or retrieves a flag that controls the certificate store when it is opened.

CAStoreName

Sets or retrieves the name of the store where all non-"ROOT" and non-"MY" certificates are kept.

CAStoreType

Sets or retrieves the type of store to use for the store specified by the CAStoreName property.

ClientId

Sets or retrieves the client ID request attribute.

ContainerName

Sets or retrieves the name of the key container to use.

DeleteRequestCert

Sets or retrieves a Boolean indicator that controls whether dummy certificates in the request store are deleted.

EnableSMIMECapabilities

Sets or retrieves a Boolean value that controls whether the PKCS10 will contain a signed attribute for Secure/Multipurpose Internet Mail Extensions (S/MIME) capabilities.

EnableT61DNEncoding

Sets or retrieves a Boolean value that controls whether the distinguished name in the request is encoded as a T61 string instead of as a UNICODE string.

GenKeyFlags

Sets or retrieves the values passed to CryptGenKey when the certificate request is generated.

HashAlgID

Sets or retrieves the hash algorithm used when signing a PKCS #10 certificate request.

HashAlgorithm

Sets or retrieves only the signature hash algorithm used to sign the PKCS #10.

IncludeSubjectKeyID

Sets or retrieves a Boolean value that controls whether a subject key identifier extension is included in the certificate request.

KeySpec

Sets or retrieves the type of key generated.

LimitExchangeKeyToEncipherment

Sets or retrieves a Boolean value that controls whether an AT_KEYEXCHANGE request contains digital signature and non-repudiation key usages.

MyStoreFlags

Sets the registry location used for the MY store.

MyStoreName

Sets or retrieves the name of the store where certificates with linked private keys are kept.

MyStoreType

Sets or retrieves the type of store specified by the MyStoreName property.

PrivateKeyArchiveCertificate

Sets or retrieves the certificate that is used to archive a private key with a PKCS #7 or CMC request.

ProviderFlags

Sets or retrieves the CSP type.

ProviderName

Sets or retrieves the name of the CSP to use.

ProviderType

Sets or retrieves the type of provider.

PVKFileName

Sets or retrieves the name of the file that will contain exported keys.

RequestStoreFlags

Sets or retrieves the registry location used for the REQUEST store.

RequestStoreName

Sets or retrieves the name of the store that contains the dummy certificate. This dummy certificate, along with the added private keys, remains in the request store until a certification authority processes the request and responds with a PKCS #7.

RequestStoreType

Sets or retrieves the type of store to use for the store specified by the RequestStoreName property.

ReuseHardwareKeyIfUnableToGenNew

Sets or retrieves a Boolean value that determines the action taken by the certificate enrollment control object if an error is encountered when generating a new key.

RootStoreFlags

Sets or retrieves the registry location used for the ROOT store.

RootStoreName

Sets or retrieves the name of the root store where all intrinsically trusted self-signed ROOT certificates are kept.

RootStoreType

Sets or retrieves the type of store to use for the store specified by the RootStoreName property.

SignerCertificate

Sets the signer's certificate.

SPCFileName

Sets or retrieves the name of the file to write the resulting base64-encoded PKCS #7 (in BSTR form) as returned from the certification authority.

ThumbPrint

Sets or retrieves a hash of the certificate data.

UseExistingKeySet

Sets or retrieves a Boolean value that indicates whether the existing keys should be used.

WriteCertToCSP

Sets or retrieves a Boolean value that indicates whether a certificate should be written to the CSP.

WriteCertToUserDS

Sets or retrieves a Boolean value that controls whether the certificate is written to the user's Active Directory store.

Xenroll.h

Uuid.lib

Xenroll.dll

IID_ICEnroll4 is defined as c1f1188a-2eb5-4a80-841b-7e729a356d90