IEnroll4::WriteCertToCSP property

[This property is no longer available for use as of Windows Server 2008 and Windows Vista.]

The WriteCertToCSP property sets or retrieves a Boolean value that determines whether a certificate should be written to the cryptographic service provider (CSP).

This property was first defined by the IEnroll interface.

This property is read/write.


HRESULT put_WriteCertToCSP(
  [in]  BOOL fBool

HRESULT get_WriteCertToCSP(
  [out] BOOL *pfBool

Property value

BOOL value assigned to the WriteCertToCSP property. The default value is TRUE.

Error codes

If the property access methods put_WriteCertToCSP and get_WriteCertToCSP succeed, they return S_OK.

Any other HRESULT value indicates that the call failed.


This property is typically used with smart cards, where the certificate is written to the smart card in addition to being written to the "MY" store.

The default value is true, which means that the Certificate Enrollment Control will try to write the certificate to the CSP but will not fail unless a hardware token error is encountered. If this value is true, but no smart card or other hardware-dependent CSP is installed, then hardware token errors will be ignored.

To explicitly force that the Certificate Enrollment Control not attempt to write to the CSP, set this value to false.

WriteCertToCSP affects the behavior of the following methods:


Minimum supported client

Windows XP [desktop apps only]

Minimum supported server

Windows Server 2003 [desktop apps only]

End of client support

Windows XP

End of server support

Windows Server 2003








IID_IEnroll4 is defined as f8053fe5-78f4-448f-a0db-41d61b73446b

See also