KERB_CLEANUP_MACHINE_PKINIT_CREDS_REQUEST structure

The KERB_CLEANUP_MACHINE_PKINIT_CREDS_REQUEST structure cleans up the PKINIT device credentials from the computer.

Syntax


typedef struct _KERB_CLEANUP_MACHINE_PKINIT_CREDS_REQUEST {
  KERB_PROTOCOL_MESSAGE_TYPE MessageType;
  LUID                       LogonId;
} KERB_CLEANUP_MACHINE_PKINIT_CREDS_REQUEST, *PKERB_CLEANUP_MACHINE_PKINIT_CREDS_REQUEST;

Members

MessageType

The type of the message. You should set this to KerbCleanupMachinePkinitCredsMessage.

LogonId

The logon session identifier. You should set this to SYSTEM LUID or NETWORKSERVICE LUID. TCB is required if this field is different from the caller's LUID.

Remarks

You must clean up PKINIT device credentials for LOCAL_SYSTEM or NETWORK_SERVICE. When the PKINIT device credential is cleaned up, only the password credentials remain.

Requirements

Minimum supported client

Windows 8 [desktop apps only]

Minimum supported server

Windows Server 2012 [desktop apps only]

Header

Ntsecapi.h

 

 

Show: