|  | /** | 
|  | * This file has no copyright assigned and is placed in the Public Domain. | 
|  | * This file is part of the w64 mingw-runtime package. | 
|  | * No warranty is given; refer to the file DISCLAIMER.PD within this package. | 
|  | */ | 
|  | #ifndef _INC_CERTENROLL | 
|  | #define _INC_CERTENROLL | 
|  |  | 
|  | #if (_WIN32_WINNT >= 0x0600) | 
|  | #ifdef __cplusplus | 
|  | extern "C" { | 
|  | #endif | 
|  |  | 
|  | typedef enum AlgorithmFlags { | 
|  | AlgorithmFlagsNone   = 0x00000000, | 
|  | AlgorithmFlagsWrap   = 0x00000001 | 
|  | } AlgorithmFlags; | 
|  |  | 
|  | typedef enum AlgorithmOperationFlags { | 
|  | XCN_NCRYPT_NO_OPERATION                      = 0, | 
|  | XCN_NCRYPT_CIPHER_OPERATION                  = 0x1, | 
|  | XCN_NCRYPT_HASH_OPERATION                    = 0x2, | 
|  | XCN_NCRYPT_ASYMMETRIC_ENCRYPTION_OPERATION   = 0x4, | 
|  | XCN_NCRYPT_SECRET_AGREEMENT_OPERATION        = 0x8, | 
|  | XCN_NCRYPT_SIGNATURE_OPERATION               = 0x10, | 
|  | XCN_NCRYPT_RNG_OPERATION                     = 0x20, | 
|  | XCN_NCRYPT_ANY_ASYMMETRIC_OPERATION          = ( ( 0x4 | 0x8 )  | 0x10 ), | 
|  | XCN_NCRYPT_PREFER_SIGNATURE_ONLY_OPERATION   = 0x00200000, | 
|  | XCN_NCRYPT_PREFER_NON_SIGNATURE_OPERATION    = 0x00400000, | 
|  | XCN_NCRYPT_EXACT_MATCH_OPERATION             = 0x00800000, | 
|  | XCN_NCRYPT_PREFERENCE_MASK_OPERATION         = 0x00e00000 | 
|  | } AlgorithmOperationFlags; | 
|  |  | 
|  | typedef enum AlgorithmType { | 
|  | XCN_BCRYPT_UNKNOWN_INTERFACE                 = 0, | 
|  | XCN_BCRYPT_SIGNATURE_INTERFACE               = 0x5, | 
|  | XCN_BCRYPT_ASYMMETRIC_ENCRYPTION_INTERFACE   = 0x3, | 
|  | XCN_BCRYPT_CIPHER_INTERFACE                  = 0x1, | 
|  | XCN_BCRYPT_HASH_INTERFACE                    = 0x2, | 
|  | XCN_BCRYPT_SECRET_AGREEMENT_INTERFACE        = 0x4, | 
|  | XCN_BCRYPT_RNG_INTERFACE                     = 0x6 | 
|  | } AlgorithmType; | 
|  |  | 
|  | typedef enum AlternativeNameType { | 
|  | XCN_CERT_ALT_NAME_UNKNOWN               = 0, | 
|  | XCN_CERT_ALT_NAME_OTHER_NAME            = 1, | 
|  | XCN_CERT_ALT_NAME_RFC822_NAME           = 2, | 
|  | XCN_CERT_ALT_NAME_DNS_NAME              = 3, | 
|  | XCN_CERT_ALT_NAME_DIRECTORY_NAME        = 5, | 
|  | XCN_CERT_ALT_NAME_URL                   = 7, | 
|  | XCN_CERT_ALT_NAME_IP_ADDRESS            = 8, | 
|  | XCN_CERT_ALT_NAME_REGISTERED_ID         = 9, | 
|  | XCN_CERT_ALT_NAME_GUID                  = 10, | 
|  | XCN_CERT_ALT_NAME_USER_PRINCIPLE_NAME   = 11 | 
|  | } AlternativeNameType; | 
|  |  | 
|  | typedef enum CERTENROLL_PROPERTYID { | 
|  | XCN_PROPERTYID_NONE                              = 0, | 
|  | XCN_CERT_KEY_PROV_HANDLE_PROP_ID                 = 1, | 
|  | XCN_CERT_KEY_PROV_INFO_PROP_ID                   = 2, | 
|  | XCN_CERT_SHA1_HASH_PROP_ID                       = 3, | 
|  | XCN_CERT_MD5_HASH_PROP_ID                        = 4, | 
|  | XCN_CERT_HASH_PROP_ID                            = 3, | 
|  | XCN_CERT_KEY_CONTEXT_PROP_ID                     = 5, | 
|  | XCN_CERT_KEY_SPEC_PROP_ID                        = 6, | 
|  | XCN_CERT_IE30_RESERVED_PROP_ID                   = 7, | 
|  | XCN_CERT_PUBKEY_HASH_RESERVED_PROP_ID            = 8, | 
|  | XCN_CERT_ENHKEY_USAGE_PROP_ID                    = 9, | 
|  | XCN_CERT_CTL_USAGE_PROP_ID                       = 9, | 
|  | XCN_CERT_NEXT_UPDATE_LOCATION_PROP_ID            = 10, | 
|  | XCN_CERT_FRIENDLY_NAME_PROP_ID                   = 11, | 
|  | XCN_CERT_PVK_FILE_PROP_ID                        = 12, | 
|  | XCN_CERT_DESCRIPTION_PROP_ID                     = 13, | 
|  | XCN_CERT_ACCESS_STATE_PROP_ID                    = 14, | 
|  | XCN_CERT_SIGNATURE_HASH_PROP_ID                  = 15, | 
|  | XCN_CERT_SMART_CARD_DATA_PROP_ID                 = 16, | 
|  | XCN_CERT_EFS_PROP_ID                             = 17, | 
|  | XCN_CERT_FORTEZZA_DATA_PROP_ID                   = 18, | 
|  | XCN_CERT_ARCHIVED_PROP_ID                        = 19, | 
|  | XCN_CERT_KEY_IDENTIFIER_PROP_ID                  = 20, | 
|  | XCN_CERT_AUTO_ENROLL_PROP_ID                     = 21, | 
|  | XCN_CERT_PUBKEY_ALG_PARA_PROP_ID                 = 22, | 
|  | XCN_CERT_CROSS_CERT_DIST_POINTS_PROP_ID          = 23, | 
|  | XCN_CERT_ISSUER_PUBLIC_KEY_MD5_HASH_PROP_ID      = 24, | 
|  | XCN_CERT_SUBJECT_PUBLIC_KEY_MD5_HASH_PROP_ID     = 25, | 
|  | XCN_CERT_ENROLLMENT_PROP_ID                      = 26, | 
|  | XCN_CERT_DATE_STAMP_PROP_ID                      = 27, | 
|  | XCN_CERT_ISSUER_SERIAL_NUMBER_MD5_HASH_PROP_ID   = 28, | 
|  | XCN_CERT_SUBJECT_NAME_MD5_HASH_PROP_ID           = 29, | 
|  | XCN_CERT_EXTENDED_ERROR_INFO_PROP_ID             = 30, | 
|  | XCN_CERT_RENEWAL_PROP_ID                         = 64, | 
|  | XCN_CERT_ARCHIVED_KEY_HASH_PROP_ID               = 65, | 
|  | XCN_CERT_AUTO_ENROLL_RETRY_PROP_ID               = 66, | 
|  | XCN_CERT_AIA_URL_RETRIEVED_PROP_ID               = 67, | 
|  | XCN_CERT_AUTHORITY_INFO_ACCESS_PROP_ID           = 68, | 
|  | XCN_CERT_BACKED_UP_PROP_ID                       = 69, | 
|  | XCN_CERT_OCSP_RESPONSE_PROP_ID                   = 70, | 
|  | XCN_CERT_REQUEST_ORIGINATOR_PROP_ID              = 71, | 
|  | XCN_CERT_SOURCE_LOCATION_PROP_ID                 = 72, | 
|  | XCN_CERT_SOURCE_URL_PROP_ID                      = 73, | 
|  | XCN_CERT_NEW_KEY_PROP_ID                         = 74, | 
|  | XCN_CERT_FIRST_RESERVED_PROP_ID                  = 87, | 
|  | XCN_CERT_LAST_RESERVED_PROP_ID                   = 0x7fff, | 
|  | XCN_CERT_FIRST_USER_PROP_ID                      = 0x8000, | 
|  | XCN_CERT_LAST_USER_PROP_ID                       = 0xffff, | 
|  | XCN_CERT_STORE_LOCALIZED_NAME_PROP_ID            = 0x1000, | 
|  | XCN_CERT_CEP_PROP_ID                             = 87 | 
|  | } CERTENROLL_PROPERTYID; | 
|  |  | 
|  | typedef enum CERTENROLL_OBJECTID { | 
|  | XCN_OID_NONE                                         = 0, | 
|  | XCN_OID_RSA                                          = 1, | 
|  | XCN_OID_PKCS                                         = 2, | 
|  | XCN_OID_RSA_HASH                                     = 3, | 
|  | XCN_OID_RSA_ENCRYPT                                  = 4, | 
|  | XCN_OID_PKCS_1                                       = 5, | 
|  | XCN_OID_PKCS_2                                       = 6, | 
|  | XCN_OID_PKCS_3                                       = 7, | 
|  | XCN_OID_PKCS_4                                       = 8, | 
|  | XCN_OID_PKCS_5                                       = 9, | 
|  | XCN_OID_PKCS_6                                       = 10, | 
|  | XCN_OID_PKCS_7                                       = 11, | 
|  | XCN_OID_PKCS_8                                       = 12, | 
|  | XCN_OID_PKCS_9                                       = 13, | 
|  | XCN_OID_PKCS_10                                      = 14, | 
|  | XCN_OID_PKCS_12                                      = 15, | 
|  | XCN_OID_RSA_RSA                                      = 16, | 
|  | XCN_OID_RSA_MD2RSA                                   = 17, | 
|  | XCN_OID_RSA_MD4RSA                                   = 18, | 
|  | XCN_OID_RSA_MD5RSA                                   = 19, | 
|  | XCN_OID_RSA_SHA1RSA                                  = 20, | 
|  | XCN_OID_RSA_SETOAEP_RSA                              = 21, | 
|  | XCN_OID_RSA_DH                                       = 22, | 
|  | XCN_OID_RSA_data                                     = 23, | 
|  | XCN_OID_RSA_signedData                               = 24, | 
|  | XCN_OID_RSA_envelopedData                            = 25, | 
|  | XCN_OID_RSA_signEnvData                              = 26, | 
|  | XCN_OID_RSA_digestedData                             = 27, | 
|  | XCN_OID_RSA_hashedData                               = 28, | 
|  | XCN_OID_RSA_encryptedData                            = 29, | 
|  | XCN_OID_RSA_emailAddr                                = 30, | 
|  | XCN_OID_RSA_unstructName                             = 31, | 
|  | XCN_OID_RSA_contentType                              = 32, | 
|  | XCN_OID_RSA_messageDigest                            = 33, | 
|  | XCN_OID_RSA_signingTime                              = 34, | 
|  | XCN_OID_RSA_counterSign                              = 35, | 
|  | XCN_OID_RSA_challengePwd                             = 36, | 
|  | XCN_OID_RSA_unstructAddr                             = 37, | 
|  | XCN_OID_RSA_extCertAttrs                             = 38, | 
|  | XCN_OID_RSA_certExtensions                           = 39, | 
|  | XCN_OID_RSA_SMIMECapabilities                        = 40, | 
|  | XCN_OID_RSA_preferSignedData                         = 41, | 
|  | XCN_OID_RSA_SMIMEalg                                 = 42, | 
|  | XCN_OID_RSA_SMIMEalgESDH                             = 43, | 
|  | XCN_OID_RSA_SMIMEalgCMS3DESwrap                      = 44, | 
|  | XCN_OID_RSA_SMIMEalgCMSRC2wrap                       = 45, | 
|  | XCN_OID_RSA_MD2                                      = 46, | 
|  | XCN_OID_RSA_MD4                                      = 47, | 
|  | XCN_OID_RSA_MD5                                      = 48, | 
|  | XCN_OID_RSA_RC2CBC                                   = 49, | 
|  | XCN_OID_RSA_RC4                                      = 50, | 
|  | XCN_OID_RSA_DES_EDE3_CBC                             = 51, | 
|  | XCN_OID_RSA_RC5_CBCPad                               = 52, | 
|  | XCN_OID_ANSI_X942                                    = 53, | 
|  | XCN_OID_ANSI_X942_DH                                 = 54, | 
|  | XCN_OID_X957                                         = 55, | 
|  | XCN_OID_X957_DSA                                     = 56, | 
|  | XCN_OID_X957_SHA1DSA                                 = 57, | 
|  | XCN_OID_DS                                           = 58, | 
|  | XCN_OID_DSALG                                        = 59, | 
|  | XCN_OID_DSALG_CRPT                                   = 60, | 
|  | XCN_OID_DSALG_HASH                                   = 61, | 
|  | XCN_OID_DSALG_SIGN                                   = 62, | 
|  | XCN_OID_DSALG_RSA                                    = 63, | 
|  | XCN_OID_OIW                                          = 64, | 
|  | XCN_OID_OIWSEC                                       = 65, | 
|  | XCN_OID_OIWSEC_md4RSA                                = 66, | 
|  | XCN_OID_OIWSEC_md5RSA                                = 67, | 
|  | XCN_OID_OIWSEC_md4RSA2                               = 68, | 
|  | XCN_OID_OIWSEC_desECB                                = 69, | 
|  | XCN_OID_OIWSEC_desCBC                                = 70, | 
|  | XCN_OID_OIWSEC_desOFB                                = 71, | 
|  | XCN_OID_OIWSEC_desCFB                                = 72, | 
|  | XCN_OID_OIWSEC_desMAC                                = 73, | 
|  | XCN_OID_OIWSEC_rsaSign                               = 74, | 
|  | XCN_OID_OIWSEC_dsa                                   = 75, | 
|  | XCN_OID_OIWSEC_shaDSA                                = 76, | 
|  | XCN_OID_OIWSEC_mdc2RSA                               = 77, | 
|  | XCN_OID_OIWSEC_shaRSA                                = 78, | 
|  | XCN_OID_OIWSEC_dhCommMod                             = 79, | 
|  | XCN_OID_OIWSEC_desEDE                                = 80, | 
|  | XCN_OID_OIWSEC_sha                                   = 81, | 
|  | XCN_OID_OIWSEC_mdc2                                  = 82, | 
|  | XCN_OID_OIWSEC_dsaComm                               = 83, | 
|  | XCN_OID_OIWSEC_dsaCommSHA                            = 84, | 
|  | XCN_OID_OIWSEC_rsaXchg                               = 85, | 
|  | XCN_OID_OIWSEC_keyHashSeal                           = 86, | 
|  | XCN_OID_OIWSEC_md2RSASign                            = 87, | 
|  | XCN_OID_OIWSEC_md5RSASign                            = 88, | 
|  | XCN_OID_OIWSEC_sha1                                  = 89, | 
|  | XCN_OID_OIWSEC_dsaSHA1                               = 90, | 
|  | XCN_OID_OIWSEC_dsaCommSHA1                           = 91, | 
|  | XCN_OID_OIWSEC_sha1RSASign                           = 92, | 
|  | XCN_OID_OIWDIR                                       = 93, | 
|  | XCN_OID_OIWDIR_CRPT                                  = 94, | 
|  | XCN_OID_OIWDIR_HASH                                  = 95, | 
|  | XCN_OID_OIWDIR_SIGN                                  = 96, | 
|  | XCN_OID_OIWDIR_md2                                   = 97, | 
|  | XCN_OID_OIWDIR_md2RSA                                = 98, | 
|  | XCN_OID_INFOSEC                                      = 99, | 
|  | XCN_OID_INFOSEC_sdnsSignature                        = 100, | 
|  | XCN_OID_INFOSEC_mosaicSignature                      = 101, | 
|  | XCN_OID_INFOSEC_sdnsConfidentiality                  = 102, | 
|  | XCN_OID_INFOSEC_mosaicConfidentiality                = 103, | 
|  | XCN_OID_INFOSEC_sdnsIntegrity                        = 104, | 
|  | XCN_OID_INFOSEC_mosaicIntegrity                      = 105, | 
|  | XCN_OID_INFOSEC_sdnsTokenProtection                  = 106, | 
|  | XCN_OID_INFOSEC_mosaicTokenProtection                = 107, | 
|  | XCN_OID_INFOSEC_sdnsKeyManagement                    = 108, | 
|  | XCN_OID_INFOSEC_mosaicKeyManagement                  = 109, | 
|  | XCN_OID_INFOSEC_sdnsKMandSig                         = 110, | 
|  | XCN_OID_INFOSEC_mosaicKMandSig                       = 111, | 
|  | XCN_OID_INFOSEC_SuiteASignature                      = 112, | 
|  | XCN_OID_INFOSEC_SuiteAConfidentiality                = 113, | 
|  | XCN_OID_INFOSEC_SuiteAIntegrity                      = 114, | 
|  | XCN_OID_INFOSEC_SuiteATokenProtection                = 115, | 
|  | XCN_OID_INFOSEC_SuiteAKeyManagement                  = 116, | 
|  | XCN_OID_INFOSEC_SuiteAKMandSig                       = 117, | 
|  | XCN_OID_INFOSEC_mosaicUpdatedSig                     = 118, | 
|  | XCN_OID_INFOSEC_mosaicKMandUpdSig                    = 119, | 
|  | XCN_OID_INFOSEC_mosaicUpdatedInteg                   = 120, | 
|  | XCN_OID_COMMON_NAME                                  = 121, | 
|  | XCN_OID_SUR_NAME                                     = 122, | 
|  | XCN_OID_DEVICE_SERIAL_NUMBER                         = 123, | 
|  | XCN_OID_COUNTRY_NAME                                 = 124, | 
|  | XCN_OID_LOCALITY_NAME                                = 125, | 
|  | XCN_OID_STATE_OR_PROVINCE_NAME                       = 126, | 
|  | XCN_OID_STREET_ADDRESS                               = 127, | 
|  | XCN_OID_ORGANIZATION_NAME                            = 128, | 
|  | XCN_OID_ORGANIZATIONAL_UNIT_NAME                     = 129, | 
|  | XCN_OID_TITLE                                        = 130, | 
|  | XCN_OID_DESCRIPTION                                  = 131, | 
|  | XCN_OID_SEARCH_GUIDE                                 = 132, | 
|  | XCN_OID_BUSINESS_CATEGORY                            = 133, | 
|  | XCN_OID_POSTAL_ADDRESS                               = 134, | 
|  | XCN_OID_POSTAL_CODE                                  = 135, | 
|  | XCN_OID_POST_OFFICE_BOX                              = 136, | 
|  | XCN_OID_PHYSICAL_DELIVERY_OFFICE_NAME                = 137, | 
|  | XCN_OID_TELEPHONE_NUMBER                             = 138, | 
|  | XCN_OID_TELEX_NUMBER                                 = 139, | 
|  | XCN_OID_TELETEXT_TERMINAL_IDENTIFIER                 = 140, | 
|  | XCN_OID_FACSIMILE_TELEPHONE_NUMBER                   = 141, | 
|  | XCN_OID_X21_ADDRESS                                  = 142, | 
|  | XCN_OID_INTERNATIONAL_ISDN_NUMBER                    = 143, | 
|  | XCN_OID_REGISTERED_ADDRESS                           = 144, | 
|  | XCN_OID_DESTINATION_INDICATOR                        = 145, | 
|  | XCN_OID_PREFERRED_DELIVERY_METHOD                    = 146, | 
|  | XCN_OID_PRESENTATION_ADDRESS                         = 147, | 
|  | XCN_OID_SUPPORTED_APPLICATION_CONTEXT                = 148, | 
|  | XCN_OID_MEMBER                                       = 149, | 
|  | XCN_OID_OWNER                                        = 150, | 
|  | XCN_OID_ROLE_OCCUPANT                                = 151, | 
|  | XCN_OID_SEE_ALSO                                     = 152, | 
|  | XCN_OID_USER_PASSWORD                                = 153, | 
|  | XCN_OID_USER_CERTIFICATE                             = 154, | 
|  | XCN_OID_CA_CERTIFICATE                               = 155, | 
|  | XCN_OID_AUTHORITY_REVOCATION_LIST                    = 156, | 
|  | XCN_OID_CERTIFICATE_REVOCATION_LIST                  = 157, | 
|  | XCN_OID_CROSS_CERTIFICATE_PAIR                       = 158, | 
|  | XCN_OID_GIVEN_NAME                                   = 159, | 
|  | XCN_OID_INITIALS                                     = 160, | 
|  | XCN_OID_DN_QUALIFIER                                 = 161, | 
|  | XCN_OID_DOMAIN_COMPONENT                             = 162, | 
|  | XCN_OID_PKCS_12_FRIENDLY_NAME_ATTR                   = 163, | 
|  | XCN_OID_PKCS_12_LOCAL_KEY_ID                         = 164, | 
|  | XCN_OID_PKCS_12_KEY_PROVIDER_NAME_ATTR               = 165, | 
|  | XCN_OID_LOCAL_MACHINE_KEYSET                         = 166, | 
|  | XCN_OID_PKCS_12_EXTENDED_ATTRIBUTES                  = 167, | 
|  | XCN_OID_KEYID_RDN                                    = 168, | 
|  | XCN_OID_AUTHORITY_KEY_IDENTIFIER                     = 169, | 
|  | XCN_OID_KEY_ATTRIBUTES                               = 170, | 
|  | XCN_OID_CERT_POLICIES_95                             = 171, | 
|  | XCN_OID_KEY_USAGE_RESTRICTION                        = 172, | 
|  | XCN_OID_SUBJECT_ALT_NAME                             = 173, | 
|  | XCN_OID_ISSUER_ALT_NAME                              = 174, | 
|  | XCN_OID_BASIC_CONSTRAINTS                            = 175, | 
|  | XCN_OID_KEY_USAGE                                    = 176, | 
|  | XCN_OID_PRIVATEKEY_USAGE_PERIOD                      = 177, | 
|  | XCN_OID_BASIC_CONSTRAINTS2                           = 178, | 
|  | XCN_OID_CERT_POLICIES                                = 179, | 
|  | XCN_OID_ANY_CERT_POLICY                              = 180, | 
|  | XCN_OID_AUTHORITY_KEY_IDENTIFIER2                    = 181, | 
|  | XCN_OID_SUBJECT_KEY_IDENTIFIER                       = 182, | 
|  | XCN_OID_SUBJECT_ALT_NAME2                            = 183, | 
|  | XCN_OID_ISSUER_ALT_NAME2                             = 184, | 
|  | XCN_OID_CRL_REASON_CODE                              = 185, | 
|  | XCN_OID_REASON_CODE_HOLD                             = 186, | 
|  | XCN_OID_CRL_DIST_POINTS                              = 187, | 
|  | XCN_OID_ENHANCED_KEY_USAGE                           = 188, | 
|  | XCN_OID_CRL_NUMBER                                   = 189, | 
|  | XCN_OID_DELTA_CRL_INDICATOR                          = 190, | 
|  | XCN_OID_ISSUING_DIST_POINT                           = 191, | 
|  | XCN_OID_FRESHEST_CRL                                 = 192, | 
|  | XCN_OID_NAME_CONSTRAINTS                             = 193, | 
|  | XCN_OID_POLICY_MAPPINGS                              = 194, | 
|  | XCN_OID_LEGACY_POLICY_MAPPINGS                       = 195, | 
|  | XCN_OID_POLICY_CONSTRAINTS                           = 196, | 
|  | XCN_OID_RENEWAL_CERTIFICATE                          = 197, | 
|  | XCN_OID_ENROLLMENT_NAME_VALUE_PAIR                   = 198, | 
|  | XCN_OID_ENROLLMENT_CSP_PROVIDER                      = 199, | 
|  | XCN_OID_OS_VERSION                                   = 200, | 
|  | XCN_OID_ENROLLMENT_AGENT                             = 201, | 
|  | XCN_OID_PKIX                                         = 202, | 
|  | XCN_OID_PKIX_PE                                      = 203, | 
|  | XCN_OID_AUTHORITY_INFO_ACCESS                        = 204, | 
|  | XCN_OID_BIOMETRIC_EXT                                = 205, | 
|  | XCN_OID_LOGOTYPE_EXT                                 = 206, | 
|  | XCN_OID_CERT_EXTENSIONS                              = 207, | 
|  | XCN_OID_NEXT_UPDATE_LOCATION                         = 208, | 
|  | XCN_OID_REMOVE_CERTIFICATE                           = 209, | 
|  | XCN_OID_CROSS_CERT_DIST_POINTS                       = 210, | 
|  | XCN_OID_CTL                                          = 211, | 
|  | XCN_OID_SORTED_CTL                                   = 212, | 
|  | XCN_OID_SERIALIZED                                   = 213, | 
|  | XCN_OID_NT_PRINCIPAL_NAME                            = 214, | 
|  | XCN_OID_PRODUCT_UPDATE                               = 215, | 
|  | XCN_OID_ANY_APPLICATION_POLICY                       = 216, | 
|  | XCN_OID_AUTO_ENROLL_CTL_USAGE                        = 217, | 
|  | XCN_OID_ENROLL_CERTTYPE_EXTENSION                    = 218, | 
|  | XCN_OID_CERT_MANIFOLD                                = 219, | 
|  | XCN_OID_CERTSRV_CA_VERSION                           = 220, | 
|  | XCN_OID_CERTSRV_PREVIOUS_CERT_HASH                   = 221, | 
|  | XCN_OID_CRL_VIRTUAL_BASE                             = 222, | 
|  | XCN_OID_CRL_NEXT_PUBLISH                             = 223, | 
|  | XCN_OID_KP_CA_EXCHANGE                               = 224, | 
|  | XCN_OID_KP_KEY_RECOVERY_AGENT                        = 225, | 
|  | XCN_OID_CERTIFICATE_TEMPLATE                         = 226, | 
|  | XCN_OID_ENTERPRISE_OID_ROOT                          = 227, | 
|  | XCN_OID_RDN_DUMMY_SIGNER                             = 228, | 
|  | XCN_OID_APPLICATION_CERT_POLICIES                    = 229, | 
|  | XCN_OID_APPLICATION_POLICY_MAPPINGS                  = 230, | 
|  | XCN_OID_APPLICATION_POLICY_CONSTRAINTS               = 231, | 
|  | XCN_OID_ARCHIVED_KEY_ATTR                            = 232, | 
|  | XCN_OID_CRL_SELF_CDP                                 = 233, | 
|  | XCN_OID_REQUIRE_CERT_CHAIN_POLICY                    = 234, | 
|  | XCN_OID_ARCHIVED_KEY_CERT_HASH                       = 235, | 
|  | XCN_OID_ISSUED_CERT_HASH                             = 236, | 
|  | XCN_OID_DS_EMAIL_REPLICATION                         = 237, | 
|  | XCN_OID_REQUEST_CLIENT_INFO                          = 238, | 
|  | XCN_OID_ENCRYPTED_KEY_HASH                           = 239, | 
|  | XCN_OID_CERTSRV_CROSSCA_VERSION                      = 240, | 
|  | XCN_OID_NTDS_REPLICATION                             = 241, | 
|  | XCN_OID_SUBJECT_DIR_ATTRS                            = 242, | 
|  | XCN_OID_PKIX_KP                                      = 243, | 
|  | XCN_OID_PKIX_KP_SERVER_AUTH                          = 244, | 
|  | XCN_OID_PKIX_KP_CLIENT_AUTH                          = 245, | 
|  | XCN_OID_PKIX_KP_CODE_SIGNING                         = 246, | 
|  | XCN_OID_PKIX_KP_EMAIL_PROTECTION                     = 247, | 
|  | XCN_OID_PKIX_KP_IPSEC_END_SYSTEM                     = 248, | 
|  | XCN_OID_PKIX_KP_IPSEC_TUNNEL                         = 249, | 
|  | XCN_OID_PKIX_KP_IPSEC_USER                           = 250, | 
|  | XCN_OID_PKIX_KP_TIMESTAMP_SIGNING                    = 251, | 
|  | XCN_OID_PKIX_KP_OCSP_SIGNING                         = 252, | 
|  | XCN_OID_PKIX_OCSP_NOCHECK                            = 253, | 
|  | XCN_OID_IPSEC_KP_IKE_INTERMEDIATE                    = 254, | 
|  | XCN_OID_KP_CTL_USAGE_SIGNING                         = 255, | 
|  | XCN_OID_KP_TIME_STAMP_SIGNING                        = 256, | 
|  | XCN_OID_SERVER_GATED_CRYPTO                          = 257, | 
|  | XCN_OID_SGC_NETSCAPE                                 = 258, | 
|  | XCN_OID_KP_EFS                                       = 259, | 
|  | XCN_OID_EFS_RECOVERY                                 = 260, | 
|  | XCN_OID_WHQL_CRYPTO                                  = 261, | 
|  | XCN_OID_NT5_CRYPTO                                   = 262, | 
|  | XCN_OID_OEM_WHQL_CRYPTO                              = 263, | 
|  | XCN_OID_EMBEDDED_NT_CRYPTO                           = 264, | 
|  | XCN_OID_ROOT_LIST_SIGNER                             = 265, | 
|  | XCN_OID_KP_QUALIFIED_SUBORDINATION                   = 266, | 
|  | XCN_OID_KP_KEY_RECOVERY                              = 267, | 
|  | XCN_OID_KP_DOCUMENT_SIGNING                          = 268, | 
|  | XCN_OID_KP_LIFETIME_SIGNING                          = 269, | 
|  | XCN_OID_KP_MOBILE_DEVICE_SOFTWARE                    = 270, | 
|  | XCN_OID_KP_SMART_DISPLAY                             = 271, | 
|  | XCN_OID_KP_CSP_SIGNATURE                             = 272, | 
|  | XCN_OID_DRM                                          = 273, | 
|  | XCN_OID_DRM_INDIVIDUALIZATION                        = 274, | 
|  | XCN_OID_LICENSES                                     = 275, | 
|  | XCN_OID_LICENSE_SERVER                               = 276, | 
|  | XCN_OID_KP_SMARTCARD_LOGON                           = 277, | 
|  | XCN_OID_YESNO_TRUST_ATTR                             = 278, | 
|  | XCN_OID_PKIX_POLICY_QUALIFIER_CPS                    = 279, | 
|  | XCN_OID_PKIX_POLICY_QUALIFIER_USERNOTICE             = 280, | 
|  | XCN_OID_CERT_POLICIES_95_QUALIFIER1                  = 281, | 
|  | XCN_OID_PKIX_ACC_DESCR                               = 282, | 
|  | XCN_OID_PKIX_OCSP                                    = 283, | 
|  | XCN_OID_PKIX_CA_ISSUERS                              = 284, | 
|  | XCN_OID_VERISIGN_PRIVATE_6_9                         = 285, | 
|  | XCN_OID_VERISIGN_ONSITE_JURISDICTION_HASH            = 286, | 
|  | XCN_OID_VERISIGN_BITSTRING_6_13                      = 287, | 
|  | XCN_OID_VERISIGN_ISS_STRONG_CRYPTO                   = 288, | 
|  | XCN_OID_NETSCAPE                                     = 289, | 
|  | XCN_OID_NETSCAPE_CERT_EXTENSION                      = 290, | 
|  | XCN_OID_NETSCAPE_CERT_TYPE                           = 291, | 
|  | XCN_OID_NETSCAPE_BASE_URL                            = 292, | 
|  | XCN_OID_NETSCAPE_REVOCATION_URL                      = 293, | 
|  | XCN_OID_NETSCAPE_CA_REVOCATION_URL                   = 294, | 
|  | XCN_OID_NETSCAPE_CERT_RENEWAL_URL                    = 295, | 
|  | XCN_OID_NETSCAPE_CA_POLICY_URL                       = 296, | 
|  | XCN_OID_NETSCAPE_SSL_SERVER_NAME                     = 297, | 
|  | XCN_OID_NETSCAPE_COMMENT                             = 298, | 
|  | XCN_OID_NETSCAPE_DATA_TYPE                           = 299, | 
|  | XCN_OID_NETSCAPE_CERT_SEQUENCE                       = 300, | 
|  | XCN_OID_CT_PKI_DATA                                  = 301, | 
|  | XCN_OID_CT_PKI_RESPONSE                              = 302, | 
|  | XCN_OID_PKIX_NO_SIGNATURE                            = 303, | 
|  | XCN_OID_CMC                                          = 304, | 
|  | XCN_OID_CMC_STATUS_INFO                              = 305, | 
|  | XCN_OID_CMC_IDENTIFICATION                           = 306, | 
|  | XCN_OID_CMC_IDENTITY_PROOF                           = 307, | 
|  | XCN_OID_CMC_DATA_RETURN                              = 308, | 
|  | XCN_OID_CMC_TRANSACTION_ID                           = 309, | 
|  | XCN_OID_CMC_SENDER_NONCE                             = 310, | 
|  | XCN_OID_CMC_RECIPIENT_NONCE                          = 311, | 
|  | XCN_OID_CMC_ADD_EXTENSIONS                           = 312, | 
|  | XCN_OID_CMC_ENCRYPTED_POP                            = 313, | 
|  | XCN_OID_CMC_DECRYPTED_POP                            = 314, | 
|  | XCN_OID_CMC_LRA_POP_WITNESS                          = 315, | 
|  | XCN_OID_CMC_GET_CERT                                 = 316, | 
|  | XCN_OID_CMC_GET_CRL                                  = 317, | 
|  | XCN_OID_CMC_REVOKE_REQUEST                           = 318, | 
|  | XCN_OID_CMC_REG_INFO                                 = 319, | 
|  | XCN_OID_CMC_RESPONSE_INFO                            = 320, | 
|  | XCN_OID_CMC_QUERY_PENDING                            = 321, | 
|  | XCN_OID_CMC_ID_POP_LINK_RANDOM                       = 322, | 
|  | XCN_OID_CMC_ID_POP_LINK_WITNESS                      = 323, | 
|  | XCN_OID_CMC_ID_CONFIRM_CERT_ACCEPTANCE               = 324, | 
|  | XCN_OID_CMC_ADD_ATTRIBUTES                           = 325, | 
|  | XCN_OID_LOYALTY_OTHER_LOGOTYPE                       = 326, | 
|  | XCN_OID_BACKGROUND_OTHER_LOGOTYPE                    = 327, | 
|  | XCN_OID_PKIX_OCSP_BASIC_SIGNED_RESPONSE              = 328, | 
|  | XCN_OID_PKCS_7_DATA                                  = 329, | 
|  | XCN_OID_PKCS_7_SIGNED                                = 330, | 
|  | XCN_OID_PKCS_7_ENVELOPED                             = 331, | 
|  | XCN_OID_PKCS_7_SIGNEDANDENVELOPED                    = 332, | 
|  | XCN_OID_PKCS_7_DIGESTED                              = 333, | 
|  | XCN_OID_PKCS_7_ENCRYPTED                             = 334, | 
|  | XCN_OID_PKCS_9_CONTENT_TYPE                          = 335, | 
|  | XCN_OID_PKCS_9_MESSAGE_DIGEST                        = 336, | 
|  | XCN_OID_CERT_PROP_ID_PREFIX                          = 337, | 
|  | XCN_OID_CERT_KEY_IDENTIFIER_PROP_ID                  = 338, | 
|  | XCN_OID_CERT_ISSUER_SERIAL_NUMBER_MD5_HASH_PROP_ID   = 339, | 
|  | XCN_OID_CERT_SUBJECT_NAME_MD5_HASH_PROP_ID           = 340, | 
|  | XCN_OID_CERT_MD5_HASH_PROP_ID                        = 341, | 
|  | XCN_OID_RSA_SHA256RSA                                = 342, | 
|  | XCN_OID_RSA_SHA384RSA                                = 343, | 
|  | XCN_OID_RSA_SHA512RSA                                = 344, | 
|  | XCN_OID_NIST_sha256                                  = 345, | 
|  | XCN_OID_NIST_sha384                                  = 346, | 
|  | XCN_OID_NIST_sha512                                  = 347, | 
|  | XCN_OID_RSA_MGF1                                     = 348, | 
|  | XCN_OID_ECC_PUBLIC_KEY                               = 349, | 
|  | XCN_OID_RSA_SSA_PSS                                  = 353, | 
|  | XCN_OID_ECDSA_SHA1                                   = 354, | 
|  | XCN_OID_ECDSA_SPECIFIED                              = 354 | 
|  | } CERTENROLL_OBJECTID; | 
|  |  | 
|  | typedef enum EnrollmentCAProperty { | 
|  | CAPropCommonName           = 1, | 
|  | CAPropDistinguishedName    = 2, | 
|  | CAPropSanitizedName        = 3, | 
|  | CAPropSanitizedShortName   = 4, | 
|  | CAPropDNSName              = 5, | 
|  | CAPropCertificateTypes     = 6, | 
|  | CAPropCertificate          = 7, | 
|  | CAPropDescription          = 8, | 
|  | CAPropWebServers           = 9, | 
|  | CAPropSiteName             = 10, | 
|  | CAPropSecurity             = 11, | 
|  | CAPropRenewalOnly          = 12 | 
|  | } EnrollmentCAProperty; | 
|  |  | 
|  | typedef enum EncodingType { | 
|  | XCN_CRYPT_STRING_BASE64HEADER          = 0, | 
|  | XCN_CRYPT_STRING_BASE64                = 0x1, | 
|  | XCN_CRYPT_STRING_BINARY                = 0x2, | 
|  | XCN_CRYPT_STRING_BASE64REQUESTHEADER   = 0x3, | 
|  | XCN_CRYPT_STRING_HEX                   = 0x4, | 
|  | XCN_CRYPT_STRING_HEXASCII              = 0x5, | 
|  | XCN_CRYPT_STRING_BASE64_ANY            = 0x6, | 
|  | XCN_CRYPT_STRING_ANY                   = 0x7, | 
|  | XCN_CRYPT_STRING_HEX_ANY               = 0x8, | 
|  | XCN_CRYPT_STRING_BASE64X509CRLHEADER   = 0x9, | 
|  | XCN_CRYPT_STRING_HEXADDR               = 0xa, | 
|  | XCN_CRYPT_STRING_HEXASCIIADDR          = 0xb, | 
|  | XCN_CRYPT_STRING_HEXRAW                = 0xc, | 
|  | XCN_CRYPT_STRING_NOCRLF                = 0x40000000, | 
|  | XCN_CRYPT_STRING_NOCR                  = 0x80000000 | 
|  | } EncodingType; | 
|  |  | 
|  | typedef enum CommitTemplateFlags { | 
|  | CommitFlagSaveTemplateGenerateOID     = 1, | 
|  | CommitFlagSaveTemplateUseCurrentOID   = 2, | 
|  | CommitFlagSaveTemplateOverwrite       = 3, | 
|  | CommitFlagDeleteTemplate              = 4 | 
|  | } CommitTemplateFlags; | 
|  |  | 
|  | typedef enum EnrollmentDisplayStatus { | 
|  | DisplayNo    = 0, | 
|  | DisplayYes   = 1 | 
|  | } EnrollmentDisplayStatus; | 
|  |  | 
|  | typedef enum EnrollmentEnrollStatus { | 
|  | Enrolled                             = 0x00000001, | 
|  | EnrollPended                         = 0x00000002, | 
|  | EnrollUIDeferredEnrollmentRequired   = 0x00000004, | 
|  | EnrollError                          = 0x00000010, | 
|  | EnrollUnknown                        = 0x00000020, | 
|  | EnrollSkipped                        = 0x00000040, | 
|  | EnrollDenied                         = 0x00000100 | 
|  | } EnrollmentEnrollStatus; | 
|  |  | 
|  | #if (_WIN32_WINNT >= 0x0601) | 
|  | enum EnrollmentPolicyFlags { | 
|  | DisableGroupPolicyList   = 0x2, | 
|  | DisableUserServerList    = 0x4 | 
|  | }; | 
|  |  | 
|  | typedef enum EnrollmentPolicyServerPropertyFlags { | 
|  | DefaultNone           = 0x00000000, | 
|  | DefaultPolicyServer   = 0x00000001 | 
|  | } EnrollmentPolicyServerPropertyFlags; | 
|  |  | 
|  | #endif /*(_WIN32_WINNT >= 0x0601)*/ | 
|  |  | 
|  | typedef enum EnrollmentSelectionStatus { | 
|  | SelectedNo    = 0, | 
|  | SelectedYes   = 1 | 
|  | } EnrollmentSelectionStatus; | 
|  |  | 
|  | #if (_WIN32_WINNT >= 0x0601) | 
|  |  | 
|  | typedef enum EnrollmentTemplateProperty { | 
|  | TemplatePropCommonName              = 1, | 
|  | TemplatePropFriendlyName            = 2, | 
|  | TemplatePropEKUs                    = 3, | 
|  | TemplatePropCryptoProviders         = 4, | 
|  | TemplatePropMajorRevision           = 5, | 
|  | TemplatePropDescription             = 6, | 
|  | TemplatePropKeySpec                 = 7, | 
|  | TemplatePropSchemaVersion           = 8, | 
|  | TemplatePropMinorRevision           = 9, | 
|  | TemplatePropRASignatureCount        = 10, | 
|  | TemplatePropMinimumKeySize          = 11, | 
|  | TemplatePropOID                     = 12, | 
|  | TemplatePropSupersede               = 13, | 
|  | TemplatePropRACertificatePolicies   = 14, | 
|  | TemplatePropRAEKUs                  = 15, | 
|  | TemplatePropCertificatePolicies     = 16, | 
|  | TemplatePropV1ApplicationPolicy     = 17, | 
|  | TemplatePropAsymmetricAlgorithm     = 18, | 
|  | TemplatePropKeySecurityDescriptor   = 19, | 
|  | TemplatePropSymmetricAlgorithm      = 20, | 
|  | TemplatePropSymmetricKeyLength      = 21, | 
|  | TemplatePropHashAlgorithm           = 22, | 
|  | TemplatePropEnrollmentFlags         = 23, | 
|  | TemplatePropSubjectNameFlags        = 24, | 
|  | TemplatePropPrivateKeyFlags         = 25, | 
|  | TemplatePropGeneralFlags            = 26, | 
|  | TemplatePropSecurityDescriptor      = 27, | 
|  | TemplatePropExtensions              = 28, | 
|  | TemplatePropValidityPeriod          = 29, | 
|  | TemplatePropRenewalPeriod           = 30 | 
|  | } EnrollmentTemplateProperty; | 
|  | #endif /*(_WIN32_WINNT >= 0x0601)*/ | 
|  |  | 
|  | typedef enum InnerRequestLevel { | 
|  | LevelInnermost   = 0, | 
|  | LevelNext        = 1 | 
|  | } InnerRequestLevel; | 
|  |  | 
|  | typedef enum InstallResponseRestrictionFlags { | 
|  | AllowNone                   = 0x00000000, | 
|  | AllowNoOutstandingRequest   = 0x00000001, | 
|  | AllowUntrustedCertificate   = 0x00000002, | 
|  | AllowUntrustedRoot          = 0x00000004 | 
|  | } InstallResponseRestrictionFlags; | 
|  |  | 
|  | typedef enum KeyIdentifierHashAlgorithm { | 
|  | SKIHashDefault    = 0, | 
|  | SKIHashSha1       = 1, | 
|  | SKIHashCapiSha1   = 2 | 
|  | } KeyIdentifierHashAlgorithm; | 
|  |  | 
|  | typedef enum ObjectIdGroupId { | 
|  | XCN_CRYPT_ANY_GROUP_ID                 = 0, | 
|  | XCN_CRYPT_HASH_ALG_OID_GROUP_ID        = 1, | 
|  | XCN_CRYPT_ENCRYPT_ALG_OID_GROUP_ID     = 2, | 
|  | XCN_CRYPT_PUBKEY_ALG_OID_GROUP_ID      = 3, | 
|  | XCN_CRYPT_SIGN_ALG_OID_GROUP_ID        = 4, | 
|  | XCN_CRYPT_RDN_ATTR_OID_GROUP_ID        = 5, | 
|  | XCN_CRYPT_EXT_OR_ATTR_OID_GROUP_ID     = 6, | 
|  | XCN_CRYPT_ENHKEY_USAGE_OID_GROUP_ID    = 7, | 
|  | XCN_CRYPT_POLICY_OID_GROUP_ID          = 8, | 
|  | XCN_CRYPT_TEMPLATE_OID_GROUP_ID        = 9, | 
|  | XCN_CRYPT_LAST_OID_GROUP_ID            = 9, | 
|  | XCN_CRYPT_FIRST_ALG_OID_GROUP_ID       = 1, | 
|  | XCN_CRYPT_LAST_ALG_OID_GROUP_ID        = 4, | 
|  | XCN_CRYPT_OID_DISABLE_SEARCH_DS_FLAG   = 0x80000000, | 
|  | XCN_CRYPT_KEY_LENGTH_MASK              = 0xffff0000 | 
|  | } ObjectIdGroupId; | 
|  |  | 
|  | typedef enum ObjectIdPublicKeyFlags { | 
|  | XCN_CRYPT_OID_INFO_PUBKEY_ANY                = 0, | 
|  | XCN_CRYPT_OID_INFO_PUBKEY_SIGN_KEY_FLAG      = 0x80000000, | 
|  | XCN_CRYPT_OID_INFO_PUBKEY_ENCRYPT_KEY_FLAG   = 0x40000000 | 
|  | } ObjectIdPublicKeyFlags; | 
|  |  | 
|  | typedef enum PFXExportOptions { | 
|  | PFXExportEEOnly          = 0, | 
|  | PFXExportChainNoRoot     = 1, | 
|  | PFXExportChainWithRoot   = 2 | 
|  | } PFXExportOptions; | 
|  |  | 
|  | typedef enum Pkcs10AllowedSignatureTypes { | 
|  | AllowedKeySignature    = 0x1, | 
|  | AllowedNullSignature   = 0x2 | 
|  | } Pkcs10AllowedSignatureTypes; | 
|  |  | 
|  | typedef enum PolicyQualifierType { | 
|  | PolicyQualifierTypeUnknown      = 0, | 
|  | PolicyQualifierTypeUrl          = 1, | 
|  | PolicyQualifierTypeUserNotice   = 2 | 
|  | } PolicyQualifierType; | 
|  |  | 
|  | typedef enum PolicyServerUrlFlags { | 
|  | PsfNone                    = 0, | 
|  | PsfLocationGroupPolicy     = 1, | 
|  | PsfLocationRegistry        = 2, | 
|  | PsfUseClientId             = 4, | 
|  | PsfAutoEnrollmentEnabled   = 16, | 
|  | PsfAllowUnTrustedCA        = 32 | 
|  | } PolicyServerUrlFlags; | 
|  |  | 
|  | #if (_WIN32_WINNT >= 0x0601) | 
|  |  | 
|  | typedef enum PolicyServerUrlPropertyID { | 
|  | PsPolicyID       = 0, | 
|  | PsFriendlyName   = 1 | 
|  | } PolicyServerUrlPropertyID; | 
|  |  | 
|  | #endif /*(_WIN32_WINNT >= 0x0601)*/ | 
|  |  | 
|  | typedef enum RequestClientInfoClientId { | 
|  | ClientIdNone             = 0, | 
|  | ClientIdXEnroll2003      = 1, | 
|  | ClientIdAutoEnroll2003   = 2, | 
|  | ClientIdWizard2003       = 3, | 
|  | ClientIdCertReq2003      = 4, | 
|  | ClientIdDefaultRequest   = 5, | 
|  | ClientIdAutoEnroll       = 6, | 
|  | ClientIdRequestWizard    = 7, | 
|  | ClientIdEOBO             = 8, | 
|  | ClientIdCertReq          = 9, | 
|  | ClientIdTest             = 10, | 
|  | ClientIdUserStart        = 1000 | 
|  | } RequestClientInfoClientId; | 
|  |  | 
|  | #if (_WIN32_WINNT >= 0x0601) | 
|  |  | 
|  | typedef enum WebEnrollmentFlags { | 
|  | EnrollPrompt   = 0x00000001 | 
|  | } WebEnrollmentFlags; | 
|  |  | 
|  | #endif /*(_WIN32_WINNT >= 0x0601)*/ | 
|  |  | 
|  | typedef enum WebSecurityLevel { | 
|  | LevelUnsafe   = 0, | 
|  | LevelSafe     = 1 | 
|  | } WebSecurityLevel; | 
|  |  | 
|  | typedef enum X500NameFlags { | 
|  | XCN_CERT_NAME_STR_NONE                        = 0, | 
|  | XCN_CERT_SIMPLE_NAME_STR                      = 1, | 
|  | XCN_CERT_OID_NAME_STR                         = 2, | 
|  | XCN_CERT_X500_NAME_STR                        = 3, | 
|  | XCN_CERT_XML_NAME_STR                         = 4, | 
|  | XCN_CERT_NAME_STR_SEMICOLON_FLAG              = 0x40000000, | 
|  | XCN_CERT_NAME_STR_NO_PLUS_FLAG                = 0x20000000, | 
|  | XCN_CERT_NAME_STR_NO_QUOTING_FLAG             = 0x10000000, | 
|  | XCN_CERT_NAME_STR_CRLF_FLAG                   = 0x8000000, | 
|  | XCN_CERT_NAME_STR_COMMA_FLAG                  = 0x4000000, | 
|  | XCN_CERT_NAME_STR_REVERSE_FLAG                = 0x2000000, | 
|  | XCN_CERT_NAME_STR_DISABLE_IE4_UTF8_FLAG       = 0x10000, | 
|  | XCN_CERT_NAME_STR_ENABLE_T61_UNICODE_FLAG     = 0x20000, | 
|  | XCN_CERT_NAME_STR_ENABLE_UTF8_UNICODE_FLAG    = 0x40000, | 
|  | XCN_CERT_NAME_STR_FORCE_UTF8_DIR_STR_FLAG     = 0x80000, | 
|  | XCN_CERT_NAME_STR_DISABLE_UTF8_DIR_STR_FLAG   = 0x100000 | 
|  | } X500NameFlags; | 
|  |  | 
|  | typedef enum X509CertificateEnrollmentContext { | 
|  | ContextUser                        = 0x1, | 
|  | ContextMachine                     = 0x2, | 
|  | ContextAdministratorForceMachine   = 0x3 | 
|  | } X509CertificateEnrollmentContext; | 
|  |  | 
|  | #if (_WIN32_WINNT >= 0x0601) | 
|  |  | 
|  | typedef enum X509CertificateTemplateEnrollmentFlag { | 
|  | EnrollmentIncludeSymmetricAlgorithms                  = CT_FLAG_INCLUDE_SYMMETRIC_ALGORITHMS, | 
|  | EnrollmentPendAllRequests                             = CT_FLAG_PEND_ALL_REQUESTS, | 
|  | EnrollmentPublishToKRAContainer                       = CT_FLAG_PUBLISH_TO_KRA_CONTAINER, | 
|  | EnrollmentPublishToDS                                 = CT_FLAG_PUBLISH_TO_DS, | 
|  | EnrollmentAutoEnrollmentCheckUserDSCertificate        = CT_FLAG_AUTO_ENROLLMENT_CHECK_USER_DS_CERTIFICATE, | 
|  | EnrollmentAutoEnrollment                              = CT_FLAG_AUTO_ENROLLMENT, | 
|  | EnrollmentDomainAuthenticationNotRequired             = CT_FLAG_DOMAIN_AUTHENTICATION_NOT_REQUIRED, | 
|  | EnrollmentPreviousApprovalValidateReenrollment        = CT_FLAG_PREVIOUS_APPROVAL_VALIDATE_REENROLLMENT, | 
|  | EnrollmentUserInteractionRequired                     = CT_FLAG_USER_INTERACTION_REQUIRED, | 
|  | EnrollmentAddTemplateName                             = CT_FLAG_ADD_TEMPLATE_NAME, | 
|  | EnrollmentRemoveInvalidCertificateFromPersonalStore   = CT_FLAG_REMOVE_INVALID_CERTIFICATE_FROM_PERSONAL_STORE, | 
|  | EnrollmentAllowEnrollOnBehalfOf                       = CT_FLAG_ALLOW_ENROLL_ON_BEHALF_OF, | 
|  | EnrollmentAddOCSPNoCheck                              = CT_FLAG_ADD_OCSP_NOCHECK, | 
|  | EnrollmentReuseKeyOnFullSmartCard                     = CT_FLAG_ENABLE_KEY_REUSE_ON_NT_TOKEN_KEYSET_STORAGE_FULL, | 
|  | EnrollmentNoRevocationInfoInCerts                     = CT_FLAG_NOREVOCATIONINFOINISSUEDCERTS, | 
|  | EnrollmentIncludeBasicConstraintsForEECerts           = CT_FLAG_INCLUDE_BASIC_CONSTRAINTS_FOR_EE_CERTS | 
|  | } X509CertificateTemplateEnrollmentFlag; | 
|  |  | 
|  | typedef enum X509CertificateTemplateGeneralFlag { | 
|  | GeneralMachineType    = CT_FLAG_MACHINE_TYPE, | 
|  | GeneralCA             = CT_FLAG_IS_CA, | 
|  | GeneralCrossCA        = CT_FLAG_IS_CROSS_CA, | 
|  | GeneralDefault        = CT_FLAG_IS_DEFAULT, | 
|  | GeneralModified       = CT_FLAG_IS_MODIFIED, | 
|  | GeneralDonotPersist   = CT_FLAG_DONOTPERSISTINDB | 
|  | } X509CertificateTemplateGeneralFlag; | 
|  |  | 
|  | typedef enum X509CertificateTemplatePrivateKeyFlag { | 
|  | PrivateKeyRequireArchival                      = CT_FLAG_REQUIRE_PRIVATE_KEY_ARCHIVAL, | 
|  | PrivateKeyExportable                           = CT_FLAG_EXPORTABLE_KEY, | 
|  | PrivateKeyRequireStrongKeyProtection           = CT_FLAG_STRONG_KEY_PROTECTION_REQUIRED, | 
|  | PrivateKeyRequireAlternateSignatureAlgorithm   = CT_FLAG_REQUIRE_ALTERNATE_SIGNATURE_ALGORITHM | 
|  | } X509CertificateTemplatePrivateKeyFlag; | 
|  |  | 
|  | typedef enum X509CertificateTemplateSubjectNameFlag { | 
|  | SubjectNameEnrolleeSupplies                    = CT_FLAG_ENROLLEE_SUPPLIES_SUBJECT, | 
|  | SubjectNameRequireDirectoryPath                = CT_FLAG_SUBJECT_REQUIRE_DIRECTORY_PATH, | 
|  | SubjectNameRequireCommonName                   = CT_FLAG_SUBJECT_REQUIRE_COMMON_NAME, | 
|  | SubjectNameRequireEmail                        = CT_FLAG_SUBJECT_REQUIRE_EMAIL, | 
|  | SubjectNameRequireDNS                          = CT_FLAG_SUBJECT_REQUIRE_DNS_AS_CN, | 
|  | SubjectNameAndAlternativeNameOldCertSupplies   = CT_FLAG_OLD_CERT_SUPPLIES_SUBJECT_AND_ALT_NAME, | 
|  | SubjectAlternativeNameEnrolleeSupplies         = CT_FLAG_ENROLLEE_SUPPLIES_SUBJECT_ALT_NAME, | 
|  | SubjectAlternativeNameRequireDirectoryGUID     = CT_FLAG_SUBJECT_ALT_REQUIRE_DIRECTORY_GUID, | 
|  | SubjectAlternativeNameRequireUPN               = CT_FLAG_SUBJECT_ALT_REQUIRE_UPN, | 
|  | SubjectAlternativeNameRequireEmail             = CT_FLAG_SUBJECT_ALT_REQUIRE_EMAIL, | 
|  | SubjectAlternativeNameRequireSPN               = CT_FLAG_SUBJECT_ALT_REQUIRE_SPN, | 
|  | SubjectAlternativeNameRequireDNS               = CT_FLAG_SUBJECT_ALT_REQUIRE_DNS, | 
|  | SubjectAlternativeNameRequireDomainDNS         = CT_FLAG_SUBJECT_ALT_REQUIRE_DOMAIN_DNS | 
|  | } X509CertificateTemplateSubjectNameFlag; | 
|  |  | 
|  | typedef enum X509EnrollmentPolicyExportFlags { | 
|  | ExportTemplates   = 0x1, | 
|  | ExportOIDs        = 0x2, | 
|  | ExportCAs         = 0x4 | 
|  | } X509EnrollmentPolicyExportFlags; | 
|  |  | 
|  | typedef enum X509EnrollmentPolicyLoadOption { | 
|  | LoadOptionDefault                = 0, | 
|  | LoadOptionCacheOnly              = 1, | 
|  | LoadOptionReload                 = 2, | 
|  | LoadOptionRegisterForADChanges   = 4 | 
|  | } X509EnrollmentPolicyLoadOption; | 
|  |  | 
|  |  | 
|  | #endif /*(_WIN32_WINNT >= 0x0601)*/ | 
|  |  | 
|  | typedef enum X509KeySpec { | 
|  | XCN_AT_NONE          = 0, | 
|  | XCN_AT_KEYEXCHANGE   = 1, | 
|  | XCN_AT_SIGNATURE     = 2 | 
|  | } X509KeySpec; | 
|  |  | 
|  | typedef enum X509KeyUsageFlags { | 
|  | XCN_CERT_NO_KEY_USAGE                  = 0, | 
|  | XCN_CERT_DIGITAL_SIGNATURE_KEY_USAGE   = 0x80, | 
|  | XCN_CERT_NON_REPUDIATION_KEY_USAGE     = 0x40, | 
|  | XCN_CERT_KEY_ENCIPHERMENT_KEY_USAGE    = 0x20, | 
|  | XCN_CERT_DATA_ENCIPHERMENT_KEY_USAGE   = 0x10, | 
|  | XCN_CERT_KEY_AGREEMENT_KEY_USAGE       = 0x8, | 
|  | XCN_CERT_KEY_CERT_SIGN_KEY_USAGE       = 0x4, | 
|  | XCN_CERT_OFFLINE_CRL_SIGN_KEY_USAGE    = 0x2, | 
|  | XCN_CERT_CRL_SIGN_KEY_USAGE            = 0x2, | 
|  | XCN_CERT_ENCIPHER_ONLY_KEY_USAGE       = 0x1, | 
|  | XCN_CERT_DECIPHER_ONLY_KEY_USAGE       = ( 0x80 << 8 ) | 
|  | } X509KeyUsageFlags; | 
|  |  | 
|  | typedef enum X509PrivateKeyExportFlags { | 
|  | XCN_NCRYPT_ALLOW_EXPORT_NONE                = 0, | 
|  | XCN_NCRYPT_ALLOW_EXPORT_FLAG                = 0x1, | 
|  | XCN_NCRYPT_ALLOW_PLAINTEXT_EXPORT_FLAG      = 0x2, | 
|  | XCN_NCRYPT_ALLOW_ARCHIVING_FLAG             = 0x4, | 
|  | XCN_NCRYPT_ALLOW_PLAINTEXT_ARCHIVING_FLAG   = 0x8 | 
|  | } X509PrivateKeyExportFlags; | 
|  |  | 
|  | typedef enum X509PrivateKeyProtection { | 
|  | XCN_NCRYPT_UI_NO_PROTECTION_FLAG           = 0, | 
|  | XCN_NCRYPT_UI_PROTECT_KEY_FLAG             = 0x1, | 
|  | XCN_NCRYPT_UI_FORCE_HIGH_PROTECTION_FLAG   = 0x2 | 
|  | } X509PrivateKeyProtection; | 
|  |  | 
|  | typedef enum X509RequestType { | 
|  | TypeAny           = 0, | 
|  | TypePkcs10        = 1, | 
|  | TypePkcs7         = 2, | 
|  | TypeCmc           = 3, | 
|  | TypeCertificate   = 4 | 
|  | } X509RequestType; | 
|  |  | 
|  | typedef enum X509RequestInheritOptions { | 
|  | InheritDefault                  = 0x00000000, | 
|  | InheritNewDefaultKey            = 0x00000001, | 
|  | InheritNewSimilarKey            = 0x00000002, | 
|  | InheritPrivateKey               = 0x00000003, | 
|  | InheritPublicKey                = 0x00000004, | 
|  | InheritKeyMask                  = 0x0000000f, | 
|  | InheritNone                     = 0x00000010, | 
|  | InheritRenewalCertificateFlag   = 0x00000020, | 
|  | InheritTemplateFlag             = 0x00000040, | 
|  | InheritSubjectFlag              = 0x00000080, | 
|  | InheritExtensionsFlag           = 0x00000100, | 
|  | InheritSubjectAltNameFlag       = 0x00000200, | 
|  | InheritValidityPeriodFlag       = 0x00000400 | 
|  | } X509RequestInheritOptions; | 
|  |  | 
|  | typedef enum X509ProviderType { | 
|  | XCN_PROV_NONE            = 0, | 
|  | XCN_PROV_RSA_FULL        = 1, | 
|  | XCN_PROV_RSA_SIG         = 2, | 
|  | XCN_PROV_DSS             = 3, | 
|  | XCN_PROV_FORTEZZA        = 4, | 
|  | XCN_PROV_MS_EXCHANGE     = 5, | 
|  | XCN_PROV_SSL             = 6, | 
|  | XCN_PROV_RSA_SCHANNEL    = 12, | 
|  | XCN_PROV_DSS_DH          = 13, | 
|  | XCN_PROV_EC_ECDSA_SIG    = 14, | 
|  | XCN_PROV_EC_ECNRA_SIG    = 15, | 
|  | XCN_PROV_EC_ECDSA_FULL   = 16, | 
|  | XCN_PROV_EC_ECNRA_FULL   = 17, | 
|  | XCN_PROV_DH_SCHANNEL     = 18, | 
|  | XCN_PROV_SPYRUS_LYNKS    = 20, | 
|  | XCN_PROV_RNG             = 21, | 
|  | XCN_PROV_INTEL_SEC       = 22, | 
|  | XCN_PROV_REPLACE_OWF     = 23, | 
|  | XCN_PROV_RSA_AES         = 24 | 
|  | } X509ProviderType; | 
|  |  | 
|  | typedef enum X509PrivateKeyVerify { | 
|  | VerifyNone              = 0, | 
|  | VerifySilent            = 1, | 
|  | VerifySmartCardNone     = 2, | 
|  | VerifySmartCardSilent   = 3, | 
|  | VerifyAllowUI           = 4 | 
|  | } X509PrivateKeyVerify; | 
|  |  | 
|  | typedef enum X509PrivateKeyUsageFlags { | 
|  | XCN_NCRYPT_ALLOW_USAGES_NONE          = 0, | 
|  | XCN_NCRYPT_ALLOW_DECRYPT_FLAG         = 0x1, | 
|  | XCN_NCRYPT_ALLOW_SIGNING_FLAG         = 0x2, | 
|  | XCN_NCRYPT_ALLOW_KEY_AGREEMENT_FLAG   = 0x4, | 
|  | XCN_NCRYPT_ALLOW_ALL_USAGES           = 0xffffff | 
|  | } X509PrivateKeyUsageFlags; | 
|  |  | 
|  | typedef enum EncodingType { | 
|  | XCN_CRYPT_STRING_BASE64HEADER          = 0, | 
|  | XCN_CRYPT_STRING_BASE64                = 0x1, | 
|  | XCN_CRYPT_STRING_BINARY                = 0x2, | 
|  | XCN_CRYPT_STRING_BASE64REQUESTHEADER   = 0x3, | 
|  | XCN_CRYPT_STRING_HEX                   = 0x4, | 
|  | XCN_CRYPT_STRING_HEXASCII              = 0x5, | 
|  | XCN_CRYPT_STRING_BASE64_ANY            = 0x6, | 
|  | XCN_CRYPT_STRING_ANY                   = 0x7, | 
|  | XCN_CRYPT_STRING_HEX_ANY               = 0x8, | 
|  | XCN_CRYPT_STRING_BASE64X509CRLHEADER   = 0x9, | 
|  | XCN_CRYPT_STRING_HEXADDR               = 0xa, | 
|  | XCN_CRYPT_STRING_HEXASCIIADDR          = 0xb, | 
|  | XCN_CRYPT_STRING_HEXRAW                = 0xc, | 
|  | XCN_CRYPT_STRING_NOCRLF                = 0x40000000, | 
|  | XCN_CRYPT_STRING_NOCR                  = 0x80000000 | 
|  | } EncodingType; | 
|  |  | 
|  | typedef enum EnrollmentDisplayStatus { | 
|  | DisplayNo    = 0, | 
|  | DisplayYes   = 1 | 
|  | } EnrollmentDisplayStatus; | 
|  |  | 
|  | typedef enum EnrollmentEnrollStatus { | 
|  | Enrolled                             = 0x00000001, | 
|  | EnrollPended                         = 0x00000002, | 
|  | EnrollUIDeferredEnrollmentRequired   = 0x00000004, | 
|  | EnrollError                          = 0x00000010, | 
|  | EnrollUnknown                        = 0x00000020, | 
|  | EnrollSkipped                        = 0x00000040, | 
|  | EnrollDenied                         = 0x00000100 | 
|  | } EnrollmentEnrollStatus; | 
|  |  | 
|  | typedef enum EnrollmentSelectionStatus { | 
|  | SelectedNo    = 0, | 
|  | SelectedYes   = 1 | 
|  | } EnrollmentSelectionStatus; | 
|  |  | 
|  | #ifdef __cplusplus | 
|  | } | 
|  | #endif | 
|  | #endif /*(_WIN32_WINNT >= 0x0600)*/ | 
|  | #endif /*_INC_CERTENROLL*/ |