Historical Content Alert

This is a historical content for Windows NT 4.0 product and is presented for informative purposes only. All content in this directory is copyrighted and owned by Microsoft.

ICertAdmin Interface

The ICertAdmin interface allows properly authorized clients to perform the following actions:

  • Authorize or deny a certificate request.
  • Revoke an issued certificate.
  • Trigger the generation of a certificate revocation list (CRL).
  • Get the current CRL for the server.

ICertAdmin callers have write-only access to request attributes and certificate extensions, but no direct access to other request and certificate properties.

The following methods are provided by the ICertAdmin interface.

Method Description
DenyRequest Denies a specified request.
GetCRL Gets a pointer to the current certificate revocation list (CRL).
GetRevocationReason Returns a human-readable string specifying the reason a certificate was revoked.
IsValidCertificate Checks the validity of a certificate.
PublishCRL Publishes a new certificate revocation list.
ResubmitRequest Submits the specified request back to the policy module .
RevokeCertificate Revokes a certificate by a specified date.
SetCertificateExtension Adds a new extension to the certificate to be issued.
SetRequestAttributes Sets attributes in the specified request.


Share this article: