Update rootcacertificates-csp.md

This commit is contained in:
Orlando Rodriguez 2019-09-13 09:34:26 -05:00 committed by GitHub
parent c833bd82c1
commit 884f62c580
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -21,6 +21,8 @@ The RootCATrustedCertificates configuration service provider enables the enterpr
   
The following image shows the RootCATrustedCertificates configuration service provider in tree format. The following image shows the RootCATrustedCertificates configuration service provider in tree format.
Here the detailed specfiication of the principal root nodes:
![roocacertificate](images/provisioning-csp-rootcacertificate.png) ![roocacertificate](images/provisioning-csp-rootcacertificate.png)
<a href="" id="device-or-user"></a>**Device or User** <a href="" id="device-or-user"></a>**Device or User**
@ -35,7 +37,6 @@ Defines the certificate store that contains root, or self-signed certificates, i
> [!Note] > [!Note]
> The **./User/** configuration is not supported for **RootCATrustedCertificates/Root/**. > The **./User/** configuration is not supported for **RootCATrustedCertificates/Root/**.
 
<a href="" id="rootcatrustedcertificates-ca"></a>**RootCATrustedCertificates/CA** <a href="" id="rootcatrustedcertificates-ca"></a>**RootCATrustedCertificates/CA**
Node for CA certificates. Node for CA certificates.
@ -49,39 +50,27 @@ Node for trusted people certificates.
Addeded in Windows 10, version 1803. Node for certificates that are not trusted. IT admin can use this node to immediately flag certificates that have been compromised and no longer usable. Addeded in Windows 10, version 1803. Node for certificates that are not trusted. IT admin can use this node to immediately flag certificates that have been compromised and no longer usable.
<a href="" id="certhash"></a>**_CertHash_** <a href="" id="certhash"></a>**_CertHash_**
Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value. Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value. This node is common for all the principal root nodes. The supported operations are Get and Delete.
The supported operations are Get and Delete. The following nodes, are all common to the **_CertHash_** node:
<a href="" id="-encodedcertificate"></a>**/EncodedCertificate** <a href="" id="-encodedcertificate"></a>**/EncodedCertificate**
Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc. Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc. The supported operations are Add, Get, and Replace.
The supported operations are Add, Get, and Replace.
<a href="" id="-issuedby"></a>**/IssuedBy** <a href="" id="-issuedby"></a>**/IssuedBy**
Returns the name of the certificate issuer. This is equivalent to the **Issuer** member in the CERT\_INFO data structure. Returns the name of the certificate issuer. This is equivalent to the **Issuer** member in the CERT\_INFO data structure. The only supported operation is Get.
The only supported operation is Get.
<a href="" id="-issuedto"></a>**/IssuedTo** <a href="" id="-issuedto"></a>**/IssuedTo**
Returns the name of the certificate subject. This is equivalent to the **Subject** member in the CERT\_INFO data structure. Returns the name of the certificate subject. This is equivalent to the **Subject** member in the CERT\_INFO data structure. The only supported operation is Get.
The only supported operation is Get.
<a href="" id="-validfrom"></a>**/ValidFrom** <a href="" id="-validfrom"></a>**/ValidFrom**
Returns the starting date of the certificate's validity. This is equivalent to the **NotBefore** member in the CERT\_INFO data structure. Returns the starting date of the certificate's validity. This is equivalent to the **NotBefore** member in the CERT\_INFO data structure. The only supported operation is Get.
The only supported operation is Get.
<a href="" id="-validto"></a>**/ValidTo** <a href="" id="-validto"></a>**/ValidTo**
Returns the expiration date of the certificate. This is equivalent to the **NotAfter** member in the CERT\_INFO data structure. Returns the expiration date of the certificate. This is equivalent to the **NotAfter** member in the CERT\_INFO data structure. The only supported operation is Get.
The only supported operation is Get.
<a href="" id="-templatename"></a>**/TemplateName** <a href="" id="-templatename"></a>**/TemplateName**
Returns the certificate template name. Returns the certificate template name. The only supported operation is Get.
The only supported operation is Get.
## Related topics ## Related topics