Revision Summary Date Revision History Revision Class Comments 2/22/2007 0.01 New Version 0.01 release 6/1/2007 1.0 Major Updated and revised the technical content. 7/3/2007 1.0.1 Editorial Changed language and formatting in the technical content. 7/20/2007 1.1 Minor Clarified the meaning of the technical content. 8/10/2007 1.1.1 Editorial Changed language and formatting in the technical content. 9/28/2007 1.2 Minor Clarified the meaning of the technical content. 10/23/2007 2.0 Major Updated and revised the technical content. 11/30/2007 3.0 Major Updated and revised the technical content. 1/25/2008 4.0 Updated and revised the technical content. 3/14/2008 5.0 Major Updated and revised the
technical content. 5/16/2008 6.0 Major Updated and revised the technical content. 6/20/2008 7.0 Major Updated and revised the technical content. 7/25/2008 7.1 Minor Clarified the meaning of the technical content. 8/29/2008 8.0 Major Updated and revised the technical content. 10/24/2008 9.0 Updated and revised the technical content. 12/5/2008 10.0 Updated and revised the technical content. 1/16/2009 11.0 Major Updated and revised the technical content. 2/27/2009 12.0 Major Updated and revised the technical content. 4/10/2009 13.0 Major Updated and revised the technical content. 5/22/2009 14.0 Major Updated and revised the technical content.
7/2/2009 15.0 Major Updated and revised the technical content. 8/14/2009 16.0 Major Updated and revised the technical content. 9/25/2009 17.0 Updated and revised the technical content. 11/6/2009 18.0 Major Updated and revised the technical content. 12/18/2009 19.0 Updated and revised the technical content. 1/29/2010 20.0 Major Updated and revised the technical content. 3/12/2010 21.0 Major Updated and revised the technical content. 4/23/2010 22.0 Major Updated and revised the technical content. 6/4/2010 23.0 Updated and revised the technical content. 7/16/2010 24.0 Major Updated and revised the technical content. 8/27/2010 25.0 Major Updated and revised
the technical content. 10/8/2010 26.0 Major Updated and revised the technical content. 11/19/2010 27.0 Major Updated and revised the technical content. 1/7/2011 28.0 Major Updated and revised the technical content. 2/11/2011 29.0 Major Updated and revised the technical content. 3/25/2011 30.0 Updated and revised the technical content. 5/6/2011 31.0 Major Updated and revised the technical content. 6/17/2011 31.1 Minor Clarified the meaning of the technical content. 9/23/2011 32.0 Major Updated and revised the technical content. 12/16/2011 33.0 Major Updated and revised the technical content. 3/30/2012 33.0 None No changes to the meaning, language,
or formatting of the technical content. 7/12/2012 34.0 Major Updated and revised the technical content. 10/25/2012 35.0 Major Updated and revised the technical content. 1/31/2013 35.0 None No changes to the meaning, language, or formatting of the technical content. 8/8/2013 36.0 Major Updated and revised the technical content. 11/14/2013 37.0 Major Updated and revised the technical content. 2/13/2014 38.0 Major Updated and revised the technical content. 5/15/2014 38.0 None No changes to the meaning, language, or formatting of the technical content. 6/30/2015 39.0 Major Significantly changed the technical content.
RPC Interface UUID for ICertRequestD section A.2.5. RPC Interface UUID for ICertRequestD2 [C706] section A.2.5. CLSID for CCertRequestD (the class that implements the ICertRequestD and ICertRequestD2 interfaces) [C706] section A.2.5.
DigestAlgorithmIdentifiers ContentInfo ExtendedCertificateOrCertificate RevocationInfoChoicesSignerInfos CMC full response, as specified in section 4.4. The response format is requested by the client in the dwFlags parameter of the and methods, as specified in sections 3.2.1.4.2.1 and 3.2.1.4.3.1. The following fields are specified in [RFC2797] section 3.1 and are used by this protocol: TaggedAttribute OtherMsg content BodyPartId AttributeValue ContentInfo Processing rules for these fields are specified in sections and . CA Response Attributes szOID_ENROLL_ATTESTATION_CHALLENGE OID = 1.3.6.1.4.1.311.21.28 Internal Name: szOID_ENROLL_ATTESTATION_CHALLENGE Description: The of this contains a randomly generated secret encrypted by the received in the request. Format: This value is encoded as an octet string. szOID_ENROLL_CAXCHGCERT_HASH OID = 1.3.6.1.4.1.311.21.27 Internal Name: szOID_ENROLL_CAXCHGCERT_HASH Description: The value of this contains a SHA1 hash of the entire encoded content of a CA . The CA returns it in response to an attested enrollment CMC request for the . Format: The SHA1 hash of the entire encoded content of a CA exchange certificate. This value MUST be encoded as an octet string. szOID_ENROLL_KSP_NAME See Section szOID_ENROLL_ENCRYPTION_ALGORITHM OID = 1.3.6.1.4.1.311.21.29 Internal Name: szOID_ENROLL_ENCRYPTION_ALGORITHM
Common Error Codes The following error codes are used by this protocol to indicate specific error conditions. Other error values might be used and are implementation-specific. Return Description 0x80070002 ERROR_FILE_NOT_FOUND The system cannot find the specified file. 0x8007000D ERROR_INVALID_DATA The data is not valid. 0x80074004 CERTSRV_E_PROPERTY_EMPTY A required property value is empty. 0x80070057 E_INVALIDARG The parameter is incorrect. 0x80091004 CRYPT_E_INVALID_MSG_TYPE The cryptographic message type is not valid. 0x8009200E CRYPT_E_NO_SIGNER The signed cryptographic message does not have a signer for the specified signer index. Directory Service Schema Elements This protocol accesses the schema classes and that are listed in the following table. For the syntactic specifications of the following class or class/attribute pairs, refer to Active Directory Domain Services (AD DS) in , , , and . Attribute certificationAuthority cACertificate cn Computer cn distinguishedName dNSHostName objectGuid msPKI-PrivateKeyRecoveryAgent cn userCertificate
Request_Raw_Name Request_Country Request_Organization Request_Org_Unit Request_Common_Name Request_Locality Request_State Request_Title Request_Given_Name Request_Initials Request_SurName Request_Domain_Component Request_Email Request_Street_Address Request_Unstructured_Name Request_Unstructured_Address Request_Device_Serial_Number Request_Key_Recovery_Hashes Request_Attestation_Challenge Request_Endorsement_Key_Hash Request_Endorsement_Certificate_Hash Signing_Cert Table The Signing_Cert table maintains an ordered list of and associated other data, including . The data is maintained in the following columns. Column name Column description Signing_Cert_Certificate (Public) Contains the CA certificate. Signing_Private_Key (Public) Contains the private key associated with the CA certificate stored in the CA_Signing_Cert column. Signing_Cert_Version_ID (Public) A unique identifier for the CA stored in the CA_Signing_Cert column. Signing_Private_Key_Version_ID (Public) An identifier (not unique) for the private key stored in the
223 30 219 219 23 Initialization client 66 86 server 197 106 12 K Key 26 221 219 61 59 41 27 Local events client 80 94 server 217 169 M Message processing client 66 86 server 197 106 Messages 33 33 Modes client 65 84 169 Name 220 219 27 118 20 O 25 P 30 136 169 31 31 55 225 Protocol Details 65 R 20 23 20 30 42 112 137 53 55 28 63 219 Security attributes 220 220 222 220 220 219 219 key 221 219 name 220 219 219 219 Sequencing rules client 66 86 server 197 106 Server enterprise CA 196 Active Directory 195 169 197 217 197 169