Edit

Share via

X509CertificateTemplateEnrollmentFlag enumeration (certenroll.h)

The X509CertificateTemplateEnrollmentFlag enumeration contains values that specify server and client actions during enrollment.

Syntax

typedef enum X509CertificateTemplateEnrollmentFlag {
  EnrollmentIncludeSymmetricAlgorithms = 0x1,
  EnrollmentPendAllRequests = 0x2,
  EnrollmentPublishToKRAContainer = 0x4,
  EnrollmentPublishToDS = 0x8,
  EnrollmentAutoEnrollmentCheckUserDSCertificate = 0x10,
  EnrollmentAutoEnrollment = 0x20,
  EnrollmentDomainAuthenticationNotRequired = 0x80,
  EnrollmentPreviousApprovalValidateReenrollment = 0x40,
  EnrollmentUserInteractionRequired = 0x100,
  EnrollmentAddTemplateName = 0x200,
  EnrollmentRemoveInvalidCertificateFromPersonalStore = 0x400,
  EnrollmentAllowEnrollOnBehalfOf = 0x800,
  EnrollmentAddOCSPNoCheck = 0x1000,
  EnrollmentReuseKeyOnFullSmartCard = 0x2000,
  EnrollmentNoRevocationInfoInCerts = 0x4000,
  EnrollmentIncludeBasicConstraintsForEECerts = 0x8000,
  EnrollmentPreviousApprovalKeyBasedValidateReenrollment = 0x10000,
  EnrollmentCertificateIssuancePoliciesFromRequest = 0x20000,
  EnrollmentSkipAutoRenewal = 0x40000
} ;

Constants

 
EnrollmentIncludeSymmetricAlgorithms
Value: 0x1
Instructs the client and server to include a Secure/Multipurpose Internet Mail Extensions (S/MIME) extension in the certificate request and issued certificate.
EnrollmentPendAllRequests
Value: 0x2
Instructs the certification authority (CA) to place all certificate requests in a pending state.
EnrollmentPublishToKRAContainer
Value: 0x4
Instructs the certification authority to publish the issued certificate to the key recovery agent (KRA) container in Active Directory.
EnrollmentPublishToDS
Value: 0x8
Instructs clients and servers to append the issued certificate to the userCertificate attribute on the user object in Active Directory.
EnrollmentAutoEnrollmentCheckUserDSCertificate
Value: 0x10
Instructs clients to not automatically enroll a certificate based on this template if the userCertificate attribute on the user object in Active Directory already contains a valid certificate based on this template.
EnrollmentAutoEnrollment
Value: 0x20
Instructs clients to automatically enroll a certificate that is based on this template.
EnrollmentDomainAuthenticationNotRequired
Value: 0x80
Not used.
EnrollmentPreviousApprovalValidateReenrollment
Value: 0x40
Instructs clients to sign a certificate by using private keys whose public keys are contained in existing certificates.
EnrollmentUserInteractionRequired
Value: 0x100
Instructs the client to obtain user consent before attempting to enroll a certificate request based on this template.
EnrollmentAddTemplateName
Value: 0x200
Not used.
EnrollmentRemoveInvalidCertificateFromPersonalStore
Value: 0x400
Instructs the client to delete expired, revoked, or renewed certificates from the local certificate store.
EnrollmentAllowEnrollOnBehalfOf
Value: 0x800
Instructs the server to allow enroll-on-behalf-of (EOBO) functionality.
EnrollmentAddOCSPNoCheck
Value: 0x1000
Instructs the server to not include revocation information in the issued certificate, adding instead an id-pkix-ocsp-nocheck extension that specifies that the certificate holder can be trusted for the life of the certificate.
EnrollmentReuseKeyOnFullSmartCard
Value: 0x2000
Instructs the client to reuse a private key for a smart card based certificate renewal if a new private key cannot be created on the card.
EnrollmentNoRevocationInfoInCerts
Value: 0x4000
Instructs the server to not include revocation information in the issued certificate.
EnrollmentIncludeBasicConstraintsForEECerts
Value: 0x8000
Instructs the server to include the Basic Constraints extension in the issued certificate.
EnrollmentPreviousApprovalKeyBasedValidateReenrollment
Value: 0x10000
EnrollmentCertificateIssuancePoliciesFromRequest
Value: 0x20000
EnrollmentSkipAutoRenewal
Value: 0x40000

Requirements

Requirement Value
Minimum supported client Windows 7 [desktop apps only]
Minimum supported server Windows Server 2008 R2 [desktop apps only]
Header certenroll.h
  • Last updated on