Using the Certificate Enrollment Control Properties

Each Certificate Enrollment Control property is read/write and has an initialized default as well as a set of acceptable values. You can set a property to any value within this set in order to modify the behavior of methods that use the property. To get a desired behavior, set the property before you call the method that uses that property's value.

Note, however, that after calling the following methods

• acceptPKCS7
• acceptFilePKCS7
• createPKCS10
• createFilePKCS10

the following properties are blocked from being reset

• ProviderType
• KeySpec
• ProviderFlags
• ContainerName
• ProviderName

unless the ICEnroll4::Reset method is called.

For information about individual properties and methods, see the reference topics for those properties and methods in the Cryptography Reference.

The following sections contain language-specific information for setting and retrieving the Certificate Enrollment Control properties:

• Certificate Enrollment Control Properties in C++