ICEnroll4::getCertFromResponse method (xenroll.h)

[This method is no longer available for use as of Windows Server 2008 and Windows Vista.]

The getCertFromResponse method retrieves the certificate from a certification authority's response. This method was first defined by the ICEnroll4 interface.


HRESULT getCertFromResponse(
  [in]  BSTR strResponse,
  [out] BSTR *pstrCert


[in] strResponse

The base64-encoded response.

[out] pstrCert

A pointer to a BSTR that receives the certificate retrieved from the response. When you have finished using the BSTR, free it by calling the SysFreeString function.

Return value


If the method succeeds, the method returns S_OK.

If the method fails, it returns an HRESULT value that indicates the error. For a list of common error codes, see Common HRESULT Values.


The return value is a string that contains a certificate.


The response contained in strResponse must contain exactly one certificate; a child certificate cannot be present.

The response may be either a PKCS #7 or a full Certificate Management over CMS (CMC) response. However, to accept a full CMC response, the cryptographic service provider (CSP) must support Abstract Syntax Notation One (ASN.1) encoding of CMC structures.


Minimum supported client Windows XP [desktop apps only]
Minimum supported server Windows Server 2003 [desktop apps only]
Target Platform Windows
Header xenroll.h
Library Uuid.lib
DLL Xenroll.dll