Adding a Security Association to a NIC (NDIS 5.1)
Note NDIS 5. x has been deprecated and is superseded by NDIS 6. x. For new NDIS driver development, see Network Drivers Starting with Windows Vista. For information about porting NDIS 5. x drivers to NDIS 6. x, see Porting NDIS 5.x Drivers to NDIS 6.0.
After the TCP/IP transport determines that a NIC can perform Internet Protocol security (IPsec) operations (see Reporting a NIC's IPsec Capabilities), the transport must request the NIC's miniport driver to add one or more inbound and outbound security associations (SAs) to the NIC before the transport can offload IPsec tasks to the NIC. To request that a miniport driver add one or more SAs to its NIC, the TCP/IP transport sets OID_TCP_TASK_IPSEC_ADD_SA.