Skip to content

Latest commit

 

History

History
83 lines (62 loc) · 3.72 KB

ne-certenroll-x509privatekeyprotection.md

File metadata and controls

83 lines (62 loc) · 3.72 KB
UID title description helpviewer_keywords old-location tech.root ms.assetid ms.date ms.keywords req.header req.include-header req.target-type req.target-min-winverclnt req.target-min-winversvr req.kmdf-ver req.umdf-ver req.ddi-compliance req.unicode-ansi req.idl req.max-support req.namespace req.assembly req.type-library req.lib req.dll req.irql targetos req.typenames req.redist ms.custom f1_keywords dev_langs topic_type api_type api_location api_name
NE:certenroll.X509PrivateKeyProtection
X509PrivateKeyProtection (certenroll.h)
Specifies the level of private key protection supported by a cryptographic provider.
X509PrivateKeyProtection
X509PrivateKeyProtection enumeration [Security]
XCN_NCRYPT_UI_FORCE_HIGH_PROTECTION_FLAG
XCN_NCRYPT_UI_NO_PROTECTION_FLAG
XCN_NCRYPT_UI_PROTECT_KEY_FLAG
certenroll/X509PrivateKeyProtection
certenroll/XCN_NCRYPT_UI_FORCE_HIGH_PROTECTION_FLAG
certenroll/XCN_NCRYPT_UI_NO_PROTECTION_FLAG
certenroll/XCN_NCRYPT_UI_PROTECT_KEY_FLAG
security.x509privatekeyprotection
security\x509privatekeyprotection.htm
security
70f398bc-95bf-459c-901c-d829946aedca
12/05/2018
X509PrivateKeyProtection, X509PrivateKeyProtection enumeration [Security], XCN_NCRYPT_UI_FORCE_HIGH_PROTECTION_FLAG, XCN_NCRYPT_UI_NO_PROTECTION_FLAG, XCN_NCRYPT_UI_PROTECT_KEY_FLAG, certenroll/X509PrivateKeyProtection, certenroll/XCN_NCRYPT_UI_FORCE_HIGH_PROTECTION_FLAG, certenroll/XCN_NCRYPT_UI_NO_PROTECTION_FLAG, certenroll/XCN_NCRYPT_UI_PROTECT_KEY_FLAG, security.x509privatekeyprotection
certenroll.h
Windows
Windows Vista [desktop apps only]
Windows Server 2008 [desktop apps only]
Windows
X509PrivateKeyProtection
19H1
X509PrivateKeyProtection
certenroll/X509PrivateKeyProtection
c++
APIRef
kbSyntax
HeaderDef
CertEnroll.h
X509PrivateKeyProtection

X509PrivateKeyProtection enumeration

-description

The X509PrivateKeyProtection enumeration specifies the level of private key protection supported by a cryptographic provider. For example, if strong key protection is enabled, the user is typically prompted to enter a password when the key is created and whenever the key is used. The precise behavior is specified by the KSP or CSP being used. The enumeration value can be specified or retrieved by using the KeyProtection property on the IX509PrivateKey interface.

-enum-fields

-field XCN_NCRYPT_UI_NO_PROTECTION_FLAG:0

The protection level is not specified.

-field XCN_NCRYPT_UI_PROTECT_KEY_FLAG:0x1

A user interface is displayed to indicate that a process is attempting to use the key. The exact behavior is specified by the KSP or CSP being used. Some Microsoft legacy CSPs allow the client to decide whether a password is required to use the key or whether the user must only acknowledge a prompt.

-field XCN_NCRYPT_UI_FORCE_HIGH_PROTECTION_FLAG:0x2

Specifies strong key protection. The user is typically prompted to enter a password when the key is created and whenever the key is used. The exact behavior is specified by the KSP being used. This value is not supported by the Certificate Enrollment API for legacy CSPs.

-field XCN_NCRYPT_UI_FINGERPRINT_PROTECTION_FLAG:0x4

-field XCN_NCRYPT_UI_APPCONTAINER_ACCESS_MEDIUM_FLAG:0x8

-see-also

CertEnroll Enumerations

CertEnroll Interfaces

IX509PrivateKey