3.1.4.6 Secret Object Methods

The message processing of methods in this section MUST use the abstract data model defined in section 3.1.1.4.

Method (opnum)	Summary
LsarCreateSecret (opnum 16)	Creates a new secret object in the policy database.
LsarOpenSecret (opnum 28)	Opens a handle to an existing secret object.
LsarSetSecret (opnum 29)	Sets the value of the secret object.
LsarQuerySecret (opnum 30)	Retrieves the value of the secret object.
LsarStorePrivateData (opnum 42)	Stores private data in the server's policy database as a secret object.
LsarRetrievePrivateData (opnum 43)	Retrieves private data from a secret object in the server's policy database.

The server SHOULD<75> support the following methods:

• LsarSetSecret

• LsarQuerySecret

• LsarStorePrivateData

• LsarRetrievePrivateData

If the server does not support these methods, the server MUST respond with an RPC exception. If the server supports these methods, the server MUST perform the operations in the message processing section for each method.