ICertAdmin interface
The ICertAdmin interface provides administration functionality for properly authorized clients.
The ICertAdmin interface is used to perform the following tasks:
- Authorize or deny a certificate request.
- Revoke an issued certificate.
- Trigger the generation of a certificate revocation list (CRL).
- Get the current CRL for the server.
- Determine whether a certificate is valid.
When you use the ICertAdmin interface, you have write-only access to request attributes and certificate extensions, but no direct access to other request and certificate properties.
ICertAdmin is defined in Certadm.h. When you create a program, however, use Certsrv.h as the include file. Certadm.dll, on the other hand, provides the implementation of the ICertAdmin interface. The type information for this interface is also in Certadml.dll, which is shipped with the Platform Software Development Kit (SDK).
Administration tasks use DCOM. Code that calls this interface method as defined in an earlier version of Certadm.h will run on Windows-based servers as long as the client and the server are both running the same Windows operating system.
Certificate Services interfaces support both apartment-threading and free-threading models. For better throughput, free threading is recommended.
Inheritance
The ICertAdmin interface is extended by the ICertAdmin2 interface. All the methods defined by ICertAdmin are inherited by ICertAdmin2 and are documented under the newer interface.
Members
The ICertAdmin interface inherits from the IDispatch interface. ICertAdmin also has these types of members:
Methods
The ICertAdmin interface has these methods.
| Method | Description |
|---|---|
| DenyRequest |
Denies a certificate request. (Inherited from ICertAdminCCertAdmin) |
| GetCRL |
Gets a pointer to the current CRL. (Inherited from ICertAdminCCertAdmin) |
| GetRevocationReason |
Returns a value that specifies the reason a certificate was revoked. (Inherited from ICertAdminCCertAdmin) |
| ImportCertificate |
Imports a previously issued certificate. (Inherited from ICertAdminCCertAdmin) |
| IsValidCertificate |
Checks the validity of a certificate. (Inherited from ICertAdminCCertAdmin) |
| PublishCRL |
Publishes a new CRL. (Inherited from ICertAdminCCertAdmin) |
| ResubmitRequest |
Submits a pended certificate request to the policy module. (Inherited from ICertAdminCCertAdmin) |
| RevokeCertificate |
Revokes a certificate on a specified date. (Inherited from ICertAdminCCertAdmin) |
| SetCertificateExtension |
Adds a new extension to a certificate to be issued. (Inherited from ICertAdminCCertAdmin) |
| SetRequestAttributes |
Sets the attributes of a certificate request. (Inherited from ICertAdminCCertAdmin) |
Requirements
|
Minimum supported client | None supported [desktop apps only] |
|---|---|
|
Minimum supported server | Windows Server 2003 [desktop apps only] |
|
Header |
|
|
Library |
|
|
DLL |
|
|
IID |
IID_ICertAdmin is defined as 34df6950-7fb6-11d0-8817-00a0c903b83c |
Send comments about this topic to Microsoft
Build date: 10/26/2012