Partager via

3.1.4.2.7 ICertAdminD2::SetCASecurity (Opnum 37)

  • Article

The SetCASecurity method is used to set the CA security, as defined in the Abstract Data Model (section 3.1.1).

 HRESULT SetCASecurity(
   [in, string, unique] wchar_t const* pwszAuthority,
   [in, ref] CERTTRANSBLOB* pctbSD
 );

pwszAuthority: See the pwszAuthority definition in section 3.1.4.1.1.

pctbSD: A pointer to a CERTTRANSBLOB data structure that holds the security descriptor. Security descriptors are specified in [MS-DTYP] section 2.4.6.

The CA SHOULD use the permissions set in pctbSD to deny and allow permissions to CA functionality. Microsoft CA permissions are defined in section 3.1.1.7.