3.1.4.3.1.25 CLUSCTL_RESOURCE_DELETE_CRYPTO_CHECKPOINT

msdn link

The CLUSCTL_RESOURCE_DELETE_CRYPTO_CHECKPOINT resource control code SHOULD<159> remove a cryptographic key checkpoint, as specified in section 3.1.1.1.1.1, from the designated resource.

The client MUST provide the location of the cryptographic keys, as specified in section 3.1.1.1.1.1, in the buffer that is designated by lpInBuffer. The checkpoint for the keys MUST have been previously associated with the designated resource using the CLUSCTL_RESOURCE_ADD_CRYPTO_CHECKPOINT control, as specified in section 3.1.4.3.1.24.

After successful completion of the method, the server SHOULD NOT write any data to the buffer that is designated by lpOutBuffer.

The server MUST accept a CLUSCTL_RESOURCE_DELETE_CRYPTO_CHECKPOINT resource control code request if its protocol server state is in the read/write state, as specified in section 3.1.1.