2025-11-28 00:35:46 +09:00

50 lines
2.3 KiB
Plaintext

Windows 7 X509CertificateEnrollment C++ Sample
Sample name: enrollWithIX509EnrollmentHelper
Description:
This sample demonstrates how to use the Windows 7 new http protocol to
enroll a certificate by calling the IX509EnrollmentHelper::AddEnrollmentServer
and IX509Enrollment2::Enroll methods. The purpose of the call to the
IX509EnrollmentHelper::AddEnrollmentServer is to cache the authentication
credential to enrollment server in Windows vault.
Files:
enrollWithIX509EnrollmentHelper.cpp C++ source file
enrollWithIX509EnrollmentHelper.sln Solution file
enrollWithIX509EnrollmentHelper.vcproj Project file
readme.txt This file
Platform:
This sample requires Windows 7.
Build with Visual Studio 2008:
1. Open the enrollWithIX509EnrollmentHelper.sln with Visual Studio 2008.
2. Click on the "Build Solution" button on toolbar.
Build with Windows SDK CMD Shell:
1. Open the Windows SDK CMD Shell by clicking Start -> All Programs -> Microsoft Windows SDK v7.0 -> CMD Shell.
2. Run the command line "msbuild.exe enrollWithIX509EnrollmentHelper.sln".
Usage:
enrollWithIX509EnrollmentHelper.exe <-Param> <Value>
-Param Value
-Context User | Machine
-TemplateName Certificate template name
-PolicyServerAuthType Kerberos | UsernamePassword | Certificate
-PolicyServerUrl Policy server URL
-PolicyServerUsername Username or auth cert hash for policy server authentication
-PolicyServerPassword Password for policy server authentication
-EnrollmentServerAuthType Kerberos | UsernamePassword | Certificate
-EnrollmentServerUrl Enrollment server URL
-EnrollmentServerUsername Username or auth cert hash for enrollment server authentication
-EnrollmentServerPassword Password for enrollment server authentication
Example:
enrollWithIX509EnrollmentHelper.exe -Context User -TemplateName User -PolicyServerAuthType Certificate -Policy
ServerUrl https://policyservermachinename.sampledomain.sample.com/ADPolicyProvider_CEP_Certificate/service.svc
/CEP -PolicyServerUsername 02aea105e66a8a2d41a7f630517db0d2c0de625b -EnrollmentServerAuthType UsernamePassword
-EnrollmentServerUrl https://enrollmentservermachinename.sampledomain.sample.com/CaName_CES_UsernamePassword/
service.svc/CES -EnrollmentServerUsername sampledomain\sampleuser -EnrollmentServerPassword samplepassword