3.1.5.5 RemoteCallKerbDecryptApReply
The RemoteCallKerbDecryptApReply call uses the Kerberos DecryptApReply message (section 2.2.2.1.5) to decrypt the encrypted part of a KRB_AP_REP message ([RFC4120] section 5.5.2).
To perform this message exchange, the CredSSP server MUST send a KerbCredIsoRemoteInput object to the CredSSP client. The CallId field MUST be set to RemoteCallKerbDecryptApReply, and the DecryptApReply member of the union MUST be populated.
To reply to the preceding input message, the CredSSP client MUST respond with a KerbCredIsoRemoteOutput object. The CallId field MUST be set to RemoteCallKerbDecryptApReply, and the DecryptApReply member of the union MUST be populated.