[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ms-cryptoapi
Subject:    enroll a certificate on behalf of another user
From:       "Angst, Beat (iT_SEC)" <beat.angst () IT-SEC ! COM>
Date:       2001-04-25 9:53:14
[Download RAW message or body]


I want to enroll a certificate on behalf of another user described in the
platform SDK.

The administrator obtains an enrollment agent certificate (also known as a
signing certificate). The private key associated with this enrollment agent
certificate is used to sign a PKCS #7 request; the PKCS #7 request, in turn,
contains the user's PKCS #10 request (which is signed with the user's
private key).

I use CryptSignMessage to generate a PKCS#7 request with the enrollment
agent cert for signing.

CryptSignMessage succeeds but ICertRequest::Submit returns an failure hr =
submit failed.

Does anyone now how to set up the PKCS#7 request.

----------------------------------------------------------------
Users Guide http://msdn.microsoft.com/workshop/essentials/mail.asp
contains important info. Save time, search the archives at
http://discuss.microsoft.com/archives/index.html .
To unsubscribe, mailto:CryptoAPI-signoff-request@DISCUSS.MICROSOFT.COM

[prev in list] [next in list] [prev in thread] [next in thread]