Certificate Enrollment Control Methods

The following methods are used by Certificate Enrollment Control and can be found in xenroll.dll:

Method Description
acceptFilePKCS7 This method accepts and processes a PKCS #7 (in BSTR form) containing a certificate. The BSTR is stored in a file.
acceptPKCS7 This method accepts and processes a PKCS #7 (in BSTR form) containing a certificate. The PKCS #7 is input as a parameter.
createFilePKCS10 This method creates a PKCS #10 (in BSTR form) that can be submitted to a certificate server, requesting that a certificate be issued to the person/entity whose information is supplied in the PKCS #10. The BSTR is saved to a file.
createPKCS10 This method creates a PKCS #10 (in BSTR form) that can be submitted to a certificate server, requesting that a certificate be issued to the person/entity whose information is supplied in the PKCS #10.
enumContainers This method enumerates all the containers for the provider specified in the ProviderName property. If that property has not been changed, then ProviderNames default value, as set in the registry, is used to do the enumeration.
enumProviders This method enumerates all the providers available on the computer for the specified ProviderType property. If that property has not been changed, then the default value of the ProviderType, PROV_RSA_FULL, is used to do the enumeration.
freeRequestInfo This method is used to clean up the stores if an error occurs or if the acceptance of a PKCS #7 is not to be performed for some reason. The BSTR (containing either PKCS #7 or #10 data) parameter specifies which previously persisted data gets cleaned up. It will clean up both the PKCS #7 and PKCS #10 data associated with the BSTR input. Currently not implemented.
getCertFromPKCS7 This method is used to retrieve from a PKCS #7 just the single certificate that was issued in response to a PKCS #10. (The PKCS #7 may contain many certificates specifying the certification chain of authority that issued the certificate.)