Platform SDK: Smart Card Enrollment Control

ISCrdEnr::selectSigningCertificate

The selectSigningCertificate method displays a Select Certificate dialog box, allowing a signing certificate (also known as the enrollment agent certificate) to be selected. Before enrolling on behalf of users, you must select a signing certificate. The private key associated with this signing certificate is used to sign a PKCS #7 request. The PKCS #7, in turn, contains the user's PKCS #10 request (which is signed with the user's private key).

objSCEnroll.selectSigningCertificate( _
    dwFlags As Long, _
    bstrCertTemplateName As String)

Parameters

objSCEnroll: Object expression that resolves to a SCrdEnr object.
dwFlags: Reserved for future use. Set this value to 0.
bstrCertTemplateName: String representing the name of the certificate template for the signing certificate. You can use the value "EnrollmentAgent" if you have obtained an EnrollmentAgent certificate.

Return Values

This method has no return values.

Remarks

Before enrolling on behalf of a user, you must first obtain a signing certificate. You can obtain a signing certificate by using the Certificate Manager MMC snap-in. The selectSigningCertificate method does not obtain the signing certificate but displays a dialog box of previously obtained signing certificates, allowing you to choose which certificate will be used to sign the enroll-on-behalf requests.

An alternative to selectSigningCertificate is ISCrdEnr::setSigningCertificate.

Once a signing certificate is selected, its name can be retrieved by calling ISCrdEnr::getSigningCertificateName.

Example Code in VBScript

' Select the EnrollmentAgent signing certificate.
Senroll.selectSigningCertificate 0, "EnrollmentAgent"

Requirements