Edit

IOCSPAdmin::GetSigningCertificates method (certadm.h)

  • Article

The GetSigningCertificates method gets the signing certificates that are available on a responder server for a given certification authority (CA) certificate. This method only returns signing certificates from the CERT_SYSTEM_STORE_LOCAL_MACHINE system store for the specified server.

Syntax

HRESULT GetSigningCertificates(
  [in]  const BSTR    bstrServerName,
  [in]  const VARIANT *pCACertVar,
  [out] VARIANT       *pVal
);

Parameters

[in] bstrServerName

A string that contains the responder-server name.

[in] pCACertVar

The CA certificate for which to retrieve signing certificates.

[out] pVal

Return value

C++

If the method succeeds, it returns S_OK.

If the method fails, it returns an HRESULT value that indicates the error. For a list of common error codes, see Common HRESULT Values.

VB

The available signing certificates.

Remarks

Each signing certificate has the following properties:

  • Signed by the CA specified by the pCACertVar parameter
  • Includes the Online Certificate Status Protocol (OCSP) signing (XCN_OID_PKIX_KP_OCSP_SIGNING) extension
  • Has not expired
  • Responder server can access the certificate private key

Requirements

Requirement Value
Minimum supported client None supported
Minimum supported server Windows Server 2008 Datacenter, Windows Server 2008 Enterprise [desktop apps only]
Target Platform Windows
Header certadm.h (include Certsrv.h)
Library Certadm.lib
DLL Certadm.dll

See also

IOCSPAdmin