Enrollment Options (Windows Embedded CE 6.0)

1/6/2010

The following table shows the other enrollment options.

Enrollment option	Description
Control panel utility	You can use the control panel utility to import a certificate and a private key on your run-time image. To import it onto a Windows Embedded CE device, the private key must be in the Private Key (.pvk) format. Note: Windows 2000 and Windows XP certificate export wizards do not support the .pvk files. However, Windows 2000 Certificate Services supports the ability to export private keys to a .pvk file through an advanced certificate request. For more information, see the Windows 2000 Certificate Services article in Microsoft TechNet.
Custom enrollment client	To create a custom enrollment client for other certificate authorities, you can leverage CryptoAPI 2.0 functions and other Enroll.exe functionalities.
Smart card	Smart cards provide the flexibility of enrollment from any client device that supports smart cards, such as a desktop computer. You can import a certificate onto Windows Embedded CE and keep the associated private key on the smart card. This method provides an extra layer of security and prevents the problem of having multiple copies of the private key when you have exportable keys that you import to Windows Embedded CE from a private key file.

See Also