Edit

InstallResponseRestrictionFlags enumeration (certenroll.h)

  • Article

The InstallResponseRestrictionFlags enumeration contains flags that identify the restrictions placed on the local installation of a certificate chain. This enumeration is used by the InstallResponse method on the IX509Enrollment interface.

Syntax

typedef enum InstallResponseRestrictionFlags {
  AllowNone = 0,
  AllowNoOutstandingRequest = 0x1,
  AllowUntrustedCertificate = 0x2,
  AllowUntrustedRoot = 0x4
} ;

Constants

 
AllowNone
Value: 0
Does not allow the installation of untrusted certificates or certificates for which there is no corresponding request.
AllowNoOutstandingRequest
Value: 0x1
Creates the private key from the certificate response rather than from the dummy certificate. This makes the dummy certificate optional. If this value is not set, the dummy certificate must exist, and the private key is extracted from it.
AllowUntrustedCertificate
Value: 0x2
Installs untrusted end entity and certification authority certificates. Certification authority certificates include root and subordinate certification authority certificates. End entity certificates are installed to the personal store, and certification authority certificates are installed to the certification authority store.
AllowUntrustedRoot
Value: 0x4
Performs the same action as the AllowUntrustedCertificate flag but also installs the certificate even if the certificate chain cannot be built because the root is not trusted.

Note  On Windows Vista, the behavior of this flag is the same as that defined for the AllowUntrustedCertificate flag. You can install an untrusted root beginning with Windows Vista with SP1.

 

Requirements

Requirement Value
Minimum supported client Windows Vista [desktop apps only]
Minimum supported server Windows Server 2008 [desktop apps only]
Header certenroll.h

See also

CertEnroll Enumerations

CertEnroll Interfaces

InstallResponse