CertificateEnrollmentManager.CreateRequestAsync Method

Definition

Namespace:

Windows.Security.Cryptography.Certificates

Asynchronously creates a PKCS #10 certificate request based on properties specified in a CertificateRequestProperties object.

public:
 static IAsyncOperation<Platform::String ^> ^ CreateRequestAsync(CertificateRequestProperties ^ request);

/// [Windows.Foundation.Metadata.RemoteAsync]
 static IAsyncOperation<winrt::hstring> CreateRequestAsync(CertificateRequestProperties const& request);

[Windows.Foundation.Metadata.RemoteAsync]
public static IAsyncOperation<string> CreateRequestAsync(CertificateRequestProperties request);

function createRequestAsync(request)

Public Shared Function CreateRequestAsync (request As CertificateRequestProperties) As IAsyncOperation(Of String)

Parameters

request

CertificateRequestProperties

A CertificateRequestProperties object that contains the property values used to create the certificate request.

Returns

IAsyncOperation<String>

IAsyncOperation<Platform::String>

IAsyncOperation<winrt::hstring>

This method returns a string that contains the base64 encoded PKCS #10 certificate request.

Attributes

RemoteAsyncAttribute

Remarks

Certificate enrollment can be performed in an app container. We recommend that you use the following request objects to submit the request:

• XMLHttpRequest (JavaScript)
• HttpWebRequest (C#)
• IXMLHTTPRequest (C++)

The CertificateRequestProperties object contains the following default values.

Property	Default value
Subject	Empty string
KeyAlgorithmName	RSA
KeySize	2048 bits
FriendlyName	Empty String
HashAlgorithmName	SHA256
Exportable	Not Exportable
KeyUsages	Signing
KeyProtectionLevel	NoConsent
KeyStorageProviderName	Microsoft Software Key Storage Provider

While the CreateRequestAsync method creates the certificate request, you will need to submit the request to an http enrollment end point. You can then take the response from the http enrollment end point and then call the InstallCertificateAsync method to install the response.

Note

You must include the Signing value in the KeyUsages property in any CertificateRequestProperties object that you use in a call to CreateRequestAsync. If you wish to set KeyUsages to Decryption or KeyAgreement, you must also OR in Signing. Otherwise, the call to CreateRequestAsync will fail.