Skip to content

Latest commit

 

History

History
42 lines (28 loc) · 1.9 KB

dataprotectionprovider_dataprotectionprovider_290278668.md

File metadata and controls

42 lines (28 loc) · 1.9 KB
Raw
-api-id -api-type
M:Windows.Security.Cryptography.DataProtection.DataProtectionProvider.#ctor(System.String)
winrt method

Windows.Security.Cryptography.DataProtection.DataProtectionProvider.DataProtectionProvider

-description

Constructor used for encryption operations. Use this constructor before calling the ProtectAsync or ProtectStreamAsync methods.

-parameters

-param protectionDescriptor

Contains the protection descriptor that determines the entity to which the data will be encrypted. For more information, see Remarks.

-remarks

Do not use this constructor before starting a decryption operation. You must use the DataProtectionProvider() constructor instead.

For security descriptors and SDDL strings, you must set the enterprise authentication capability in the manifest. The enterprise authentication capability is restricted to apps built with company accounts, and is subject to additional onboarding validation. You should avoid the enterprise authentication capability unless it is absolutely necessary. For example, the following SID and SDDL providers require the enterprise authentication capability:

  • "SID=S-1-5-21-4392301 AND SID=S-1-5-21-3101812"
  • "SDDL=O:S-1-5-5-0-290724G:SYD:(A;;CCDC;;;S-1-5-5-0-290724)(A;;DC;;;WD)"

These providers do not require the enterprise authentication capability on either platform:

  • "LOCAL=user"
  • "LOCAL=machine"

These providers do not require the enterprise authentication capability on Windows:

  • "WEBCREDENTIALS=MyPasswordName"
  • "WEBCREDENTIALS=MyPasswordName,myweb.com"

-examples

-see-also

DataProtectionProvider()