Was this page helpful?
Your feedback about this content is important. Let us know what you think.
Additional feedback?
1500 characters remaining
Export (0) Print
Expand All

ICertConfig interface

The ICertConfig interface provides functionality for retrieving the public configuration data (specified during client setup) for a Certificate Services server.

The ICertConfig interface is used to perform the following tasks:

  • Enumerate through the configuration strings for a Certificate Services server in the configuration point.
  • Retrieve the default configuration for a Certificate Services server.
  • Retrieve the details of a specific Certificate Services server configuration.
  • Reset the configuration of a Certificate Services server.

For each installation of Certificate Services, this public configuration data resides in the Certsrv.txt file, which exists in the shared folder, the Active Directory, or both. Any server set up to post its configuration information in Certsrv.txt is visible to ICertConfig.

ICertConfig is defined in Certcli.h. When you create your program, however, use Certsrv.h as the include file. Certcli.dll provides the ICertConfig interface. The type information for this interface is also in Certclil.dll, which is shipped with the Platform Software Development Kit (SDK).

Certificate Services interfaces support both apartment-threading and free-threading models. For better throughput, free threading is recommended.


The ICertConfig interface is extended by the ICertConfig2 interface. All the methods defined by ICertConfig are inherited by ICertConfig2 and are documented under the newer interface.


The ICertConfig interface inherits from the IDispatch interface. ICertConfig also has these types of members:


The ICertConfig interface has these methods.


Gets the default configuration string (the server name and certification authority (CA) name) for a Certificate Services server.

(Inherited from ICertConfigICertConfig2 CCertConfig)

Gets a specific field from the current record of the configuration database.

(Inherited from ICertConfigICertConfig2 CCertConfig)

Points to the next available Certificate Services server configuration in the configuration point.

(Inherited from ICertConfigICertConfig2 CCertConfig)

Resets the configuration query state.

(Inherited from ICertConfigICertConfig2 CCertConfig)



Minimum supported client

None supported

Minimum supported server

Windows Server 2003 [desktop apps only]


Certcli.h (include Certsrv.h)






IID_ICertConfig is defined as 372FCE34-4324-11D0-8810-00A0C903B83C



Community Additions

© 2015 Microsoft