IFPCVpnNetworkIPSecSettings::Phase1DHGroup property

Article
08/27/2012

Applies to: desktop apps only

The Phase1DHGroup property gets or sets a value from the FpcVpnDiffieHellmanGroup enumerated type that specifies the Diffie-Hellman group to be used in Phase 1 of the IPsec negotiation process.

This property is read/write.

Syntax

HRESULT put_Phase1DHGroup(
  FpcVpnDiffieHellmanGroup Phase1DHGroup
);

HRESULT get_Phase1DHGroup(
  FpcVpnDiffieHellmanGroup *pPhase1DHGroup
);

' Data type: FpcVpnDiffieHellmanGroup

Property Phase1DHGroup( _
  ByVal Phase1DHGroup As FpcVpnDiffieHellmanGroup, _
  ByVal pPhase1DHGroup As FpcVpnDiffieHellmanGroup _
) As FpcVpnDiffieHellmanGroup

Property value

Value from the FpcVpnDiffieHellmanGroup enumerated type that specifies the Diffie-Hellman group to be used in Phase 1 of the IPsec negotiation process.

Error codes

These property methods return S_OK if the call is successful; otherwise, they return an error code.

Remarks

This property is read/write. Its default value is fpcVpnDHGroup2, which specifies Diffie-Hellman Group 2.

The Diffie-Hellman group sets the length of the base prime numbers used during the key exchange process. The cryptographic strength of any key derived depends, in part, on this length.

Requirements

Minimum supported client	Windows Vista
Minimum supported server	Windows Server 2008 R2, Windows Server 2008 with SP2 (64-bit only)
Version	Forefront Threat Management Gateway (TMG) 2010
IDL	Msfpccom.idl
DLL	Msfpccom.dll