Edit

IOCSPCAConfiguration::get_SigningFlags method (certadm.h)

  • Article

The SigningFlags property gets or sets a combination of flag values. These values specify the management of signing certificates that belong to a certification authority (CA) configuration.

This property is read/write.

Syntax

HRESULT get_SigningFlags(
  ULONG *pVal
);

Parameters

pVal

Return value

None

Remarks

The following table lists bit flag values for SigningFlags.

Flag constant Flag value Description
OCSP_SF_SILENT 0x001 Acquire a private key silently.
OCSP_SF_USE_CACERT 0x002 Use a CA certificate in this configuration for signing an OCSP response. This option is available only if the responder service is installed on the CA computer.
OCSP_SF_ALLOW_SIGNINGCERT_AUTORENEWAL 0x004 Enable a responder service to automatically transition to a renewed signing certificate.
OCSP_SF_FORCE_SIGNINGCERT_ISSUER_ISCA 0x008 Force a delegated signing certificate to be signed by the CA.
OCSP_SF_AUTODISCOVER_SIGNINGCERT 0x010 Automatically discover a delegated signing certificate.
OCSP_SF_MANUAL_ASSIGN_SIGNINGCERT 0x020 Manually assign a signing certificate.
OCSP_SF_RESPONDER_ID_KEYHASH 0x040 A responder ID includes a hash of the public key of the signing certificate (default).
OCSP_SF_RESPONDER_ID_NAME 0x080 A responder ID includes the name of the subject in a signing certificate.
OCSP_SF_ALLOW_NONCE_EXTENSION 0x100 Enable NONCE extension to be processed by a responder service.
OCSP_SF_ALLOW_SIGNINGCERT_AUTOENROLLMENT 0x200 A responder service can enroll for a signing certificate.
 

When setting SigningFlags, you must specify one of the values OCSP_SF_USE_CACERT, OCSP_SF_AUTODISCOVER_SIGNINGCERT, or OCSP_SF_MANUAL_ASSIGN_SIGNINGCERT.

If you specify OCSP_SF_ALLOW_SIGNINGCERT_AUTOENROLLMENT, you must also specify OCSP_SF_AUTODISCOVER_SIGNINGCERT.

Requirements

Requirement Value
Minimum supported client None supported
Minimum supported server Windows Server 2008 Datacenter, Windows Server 2008 Enterprise [desktop apps only]
Target Platform Windows
Header certadm.h (include Certserv.h)
Library Certadm.lib
DLL Certadm.dll

See also

IOCSPCAConfiguration