diff --git a/windows/client-management/mdm/rootcacertificates-csp.md b/windows/client-management/mdm/rootcacertificates-csp.md
index 13ec3d35cc..fee344edf7 100644
--- a/windows/client-management/mdm/rootcacertificates-csp.md
+++ b/windows/client-management/mdm/rootcacertificates-csp.md
@@ -1,120 +1,3575 @@
---
title: RootCATrustedCertificates CSP
-description: Learn how the RootCATrustedCertificates configuration service provider (CSP) enables the enterprise to set the Root Certificate Authority (CA) certificates.
-ms.reviewer:
+description: Learn more about the RootCATrustedCertificates CSP.
+author: vinaypamnani-msft
manager: aaroncz
ms.author: vinpa
-ms.topic: article
+ms.date: 02/24/2023
+ms.localizationpriority: medium
ms.prod: windows-client
ms.technology: itpro-manage
-author: vinaypamnani-msft
-ms.date: 03/06/2018
+ms.topic: reference
---
+
+
+
# RootCATrustedCertificates CSP
-The table below shows the applicability of Windows:
-
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|Yes|Yes|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
-
+
+
The RootCATrustedCertificates configuration service provider enables the enterprise to set the Root Certificate Authority (CA) certificates.
-> [!Note]
-> The **./User/** configuration is not supported for **RootCATrustedCertificates/Root/**.
+> [!NOTE]
+> `./User` configuration is not supported for `RootCATrustedCertificates/Root`.
+
+
The following example shows the RootCATrustedCertificates configuration service provider in tree format.
-Detailed specification of the principal root nodes:
+```text
+./Device/Vendor/MSFT/RootCATrustedCertificates
+--- CA
+------ {CertHash}
+--------- EncodedCertificate
+--------- IssuedBy
+--------- IssuedTo
+--------- TemplateName
+--------- ValidFrom
+--------- ValidTo
+--- OemEsim
+------ {CertHash}
+--------- EncodedCertificate
+--------- IssuedBy
+--------- IssuedTo
+--------- TemplateName
+--------- ValidFrom
+--------- ValidTo
+--- Root
+------ {CertHash}
+--------- EncodedCertificate
+--------- IssuedBy
+--------- IssuedTo
+--------- TemplateName
+--------- ValidFrom
+--------- ValidTo
+--- TrustedPeople
+------ {CertHash}
+--------- EncodedCertificate
+--------- IssuedBy
+--------- IssuedTo
+--------- TemplateName
+--------- ValidFrom
+--------- ValidTo
+--- TrustedPublisher
+------ {CertHash}
+--------- EncodedCertificate
+--------- IssuedBy
+--------- IssuedTo
+--------- TemplateName
+--------- ValidFrom
+--------- ValidTo
+--- UntrustedCertificates
+------ {CertHash}
+--------- EncodedCertificate
+--------- IssuedBy
+--------- IssuedTo
+--------- TemplateName
+--------- ValidFrom
+--------- ValidTo
+./User/Vendor/MSFT/RootCATrustedCertificates
+--- CA
+------ {CertHash}
+--------- EncodedCertificate
+--------- IssuedBy
+--------- IssuedTo
+--------- TemplateName
+--------- ValidFrom
+--------- ValidTo
+--- OemEsim
+------ {CertHash}
+--------- EncodedCertificate
+--------- IssuedBy
+--------- IssuedTo
+--------- TemplateName
+--------- ValidFrom
+--------- ValidTo
+--- TrustedPeople
+------ {CertHash}
+--------- EncodedCertificate
+--------- IssuedBy
+--------- IssuedTo
+--------- TemplateName
+--------- ValidFrom
+--------- ValidTo
+--- TrustedPublisher
+------ {CertHash}
+--------- EncodedCertificate
+--------- IssuedBy
+--------- IssuedTo
+--------- TemplateName
+--------- ValidFrom
+--------- ValidTo
+--- UntrustedCertificates
+------ {CertHash}
+--------- EncodedCertificate
+--------- IssuedBy
+--------- IssuedTo
+--------- TemplateName
+--------- ValidFrom
+--------- ValidTo
```
-./Vendor/MSFT
-RootCATrustedCertificates
-----Root
---------CertHash
-------------EncodedCertificate
-------------IssuedBy
-------------IssuedTo
-------------ValidFrom
-------------ValidTo
-------------TemplateName
-----CA
---------CertHash
-------------EncodedCertificate
-------------IssuedBy
-------------IssuedTo
-------------ValidFrom
-------------ValidTo
-------------TemplateName
-----TrustedPublisher
---------CertHash
-------------EncodedCertificate
-------------IssuedBy
-------------IssuedTo
-------------ValidFrom
-------------ValidTo
-------------TemplateName
-----TrustedPeople
---------CertHash
-------------EncodedCertificate
-------------IssuedBy
-------------IssuedTo
-------------ValidFrom
-------------ValidTo
-------------TemplateName
+
+
+
+## Device/CA
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/CA
```
-**Device or User**
-For device certificates, use **./Device/Vendor/MSFT** path, and for user certificates use **./User/Vendor/MSFT** path.
+
-**RootCATrustedCertificates**
-The root node for the RootCATrustedCertificates configuration service provider.
-
-**RootCATrustedCertificates/Root/**
-Defines the certificate store that contains root or self-signed certificates, in this case, the computer store.
-
-> [!Note]
-> The **./User/** configuration is not supported for **RootCATrustedCertificates/Root/**.
-
-**RootCATrustedCertificates/CA**
+
+
Node for CA certificates.
+
-**RootCATrustedCertificates/TrustedPublisher**
-Node for trusted publisher certificates.
+
+
+
-**RootCATrustedCertificates/TrustedPeople**
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | node |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+### Device/CA/{CertHash}
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/CA/{CertHash}
+```
+
+
+
+
+Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | node |
+| Access Type | Delete, Get |
+| Dynamic Node Naming | UniqueName: Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value. |
+
+
+
+
+
+
+
+
+
+#### Device/CA/{CertHash}/EncodedCertificate
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/CA/{CertHash}/EncodedCertificate
+```
+
+
+
+
+Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | b64 |
+| Access Type | Add, Get, Replace |
+
+
+
+
+
+
+
+
+
+#### Device/CA/{CertHash}/IssuedBy
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/CA/{CertHash}/IssuedBy
+```
+
+
+
+
+Returns the name of the certificate issuer. This is equivalent to the Issuer member in the [CERT_INFO data structure](/windows/win32/api/wincrypt/ns-wincrypt-cert_info).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### Device/CA/{CertHash}/IssuedTo
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/CA/{CertHash}/IssuedTo
+```
+
+
+
+
+Returns the name of the certificate subject. This is equivalent to the Subject member in the [CERT_INFO data structure](/windows/win32/api/wincrypt/ns-wincrypt-cert_info).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### Device/CA/{CertHash}/TemplateName
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/CA/{CertHash}/TemplateName
+```
+
+
+
+
+Returns the certificate template name. Supported operation is Get.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### Device/CA/{CertHash}/ValidFrom
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/CA/{CertHash}/ValidFrom
+```
+
+
+
+
+Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### Device/CA/{CertHash}/ValidTo
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/CA/{CertHash}/ValidTo
+```
+
+
+
+
+Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+## Device/OemEsim
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 11, version 21H2 [10.0.22000] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/OemEsim
+```
+
+
+
+
+Node for OEM eSIM certificates.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | node |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+### Device/OemEsim/{CertHash}
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 11, version 21H2 [10.0.22000] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/OemEsim/{CertHash}
+```
+
+
+
+
+Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | node |
+| Access Type | Delete, Get |
+| Dynamic Node Naming | UniqueName: Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value. |
+
+
+
+
+
+
+
+
+
+#### Device/OemEsim/{CertHash}/EncodedCertificate
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 11, version 21H2 [10.0.22000] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/OemEsim/{CertHash}/EncodedCertificate
+```
+
+
+
+
+Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | b64 |
+| Access Type | Add, Get, Replace |
+
+
+
+
+
+
+
+
+
+#### Device/OemEsim/{CertHash}/IssuedBy
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 11, version 21H2 [10.0.22000] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/OemEsim/{CertHash}/IssuedBy
+```
+
+
+
+
+Returns the name of the certificate issuer. This is equivalent to the Issuer member in the [CERT_INFO data structure](/windows/win32/api/wincrypt/ns-wincrypt-cert_info).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### Device/OemEsim/{CertHash}/IssuedTo
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 11, version 21H2 [10.0.22000] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/OemEsim/{CertHash}/IssuedTo
+```
+
+
+
+
+Returns the name of the certificate subject. This is equivalent to the Subject member in the [CERT_INFO data structure](/windows/win32/api/wincrypt/ns-wincrypt-cert_info).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### Device/OemEsim/{CertHash}/TemplateName
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 11, version 21H2 [10.0.22000] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/OemEsim/{CertHash}/TemplateName
+```
+
+
+
+
+Returns the certificate template name. Supported operation is Get.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### Device/OemEsim/{CertHash}/ValidFrom
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 11, version 21H2 [10.0.22000] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/OemEsim/{CertHash}/ValidFrom
+```
+
+
+
+
+Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### Device/OemEsim/{CertHash}/ValidTo
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 11, version 21H2 [10.0.22000] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/OemEsim/{CertHash}/ValidTo
+```
+
+
+
+
+Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+## Device/Root
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/Root
+```
+
+
+
+
+Defines the certificate store that contains root, or self-signed certificates, in this case, the computer store.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | node |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+### Device/Root/{CertHash}
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/Root/{CertHash}
+```
+
+
+
+
+Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | node |
+| Access Type | Delete, Get |
+
+
+
+
+
+
+
+
+
+#### Device/Root/{CertHash}/EncodedCertificate
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/Root/{CertHash}/EncodedCertificate
+```
+
+
+
+
+Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | b64 |
+| Access Type | Add, Get, Replace |
+| Dynamic Node Naming | UniqueName: Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value. |
+
+
+
+
+
+
+
+
+
+#### Device/Root/{CertHash}/IssuedBy
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/Root/{CertHash}/IssuedBy
+```
+
+
+
+
+Returns the name of the certificate issuer. This is equivalent to the Issuer member in the [CERT_INFO data structure](/windows/win32/api/wincrypt/ns-wincrypt-cert_info).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### Device/Root/{CertHash}/IssuedTo
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/Root/{CertHash}/IssuedTo
+```
+
+
+
+
+Returns the name of the certificate subject. This is equivalent to the Subject member in the [CERT_INFO data structure](/windows/win32/api/wincrypt/ns-wincrypt-cert_info).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### Device/Root/{CertHash}/TemplateName
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/Root/{CertHash}/TemplateName
+```
+
+
+
+
+Returns the certificate template name. Supported operation is Get.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### Device/Root/{CertHash}/ValidFrom
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/Root/{CertHash}/ValidFrom
+```
+
+
+
+
+Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### Device/Root/{CertHash}/ValidTo
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/Root/{CertHash}/ValidTo
+```
+
+
+
+
+Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+## Device/TrustedPeople
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/TrustedPeople
+```
+
+
+
+
Node for trusted people certificates.
+
-**RootCATrustedCertificates/UntrustedCertificates**
-Added in Windows 10, version 1803. Node for certificates that aren't trusted. IT admin can use this node to immediately flag certificates that have been compromised and no longer usable.
+
+
+
-**_CertHash_**
-Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value. This node is common for all the principal root nodes. The supported operations are Get and Delete.
+
+**Description framework properties**:
-The following nodes are all common to the **_CertHash_** node:
+| Property name | Property value |
+|:--|:--|
+| Format | node |
+| Access Type | Get |
+
-- **/EncodedCertificate**
-Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc. The supported operations are Add, Get, and Replace.
+
+
+
-- **/IssuedBy**
-Returns the name of the certificate issuer. This name is equivalent to the **Issuer** member in the CERT\_INFO data structure. The only supported operation is Get.
+
-- **/IssuedTo**
-Returns the name of the certificate subject. This name is equivalent to the **Subject** member in the CERT\_INFO data structure. The only supported operation is Get.
+
+### Device/TrustedPeople/{CertHash}
-- **/ValidFrom**
-Returns the starting date of the certificate's validity. This date is equivalent to the **NotBefore** member in the CERT\_INFO data structure. The only supported operation is Get.
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
-- **/ValidTo**
-Returns the expiration date of the certificate. This date is equivalent to the **NotAfter** member in the CERT\_INFO data structure. The only supported operation is Get.
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/TrustedPeople/{CertHash}
+```
+
-- **/TemplateName**
-Returns the certificate template name. The only supported operation is Get.
+
+
+Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
+
-## Related topics
+
+
+
-[Configuration service provider reference](index.yml)
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | node |
+| Access Type | Delete, Get |
+| Dynamic Node Naming | UniqueName: Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value. |
+
+
+
+
+
+
+
+
+
+#### Device/TrustedPeople/{CertHash}/EncodedCertificate
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/TrustedPeople/{CertHash}/EncodedCertificate
+```
+
+
+
+
+Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | b64 |
+| Access Type | Add, Get, Replace |
+
+
+
+
+
+
+
+
+
+#### Device/TrustedPeople/{CertHash}/IssuedBy
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/TrustedPeople/{CertHash}/IssuedBy
+```
+
+
+
+
+Returns the name of the certificate issuer. This is equivalent to the Issuer member in the [CERT_INFO data structure](/windows/win32/api/wincrypt/ns-wincrypt-cert_info).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### Device/TrustedPeople/{CertHash}/IssuedTo
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/TrustedPeople/{CertHash}/IssuedTo
+```
+
+
+
+
+Returns the name of the certificate subject. This is equivalent to the Subject member in the [CERT_INFO data structure](/windows/win32/api/wincrypt/ns-wincrypt-cert_info).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### Device/TrustedPeople/{CertHash}/TemplateName
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/TrustedPeople/{CertHash}/TemplateName
+```
+
+
+
+
+Returns the certificate template name. Supported operation is Get.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### Device/TrustedPeople/{CertHash}/ValidFrom
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/TrustedPeople/{CertHash}/ValidFrom
+```
+
+
+
+
+Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### Device/TrustedPeople/{CertHash}/ValidTo
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/TrustedPeople/{CertHash}/ValidTo
+```
+
+
+
+
+Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+## Device/TrustedPublisher
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/TrustedPublisher
+```
+
+
+
+
+Node for trusted publisher certificates.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | node |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+### Device/TrustedPublisher/{CertHash}
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/TrustedPublisher/{CertHash}
+```
+
+
+
+
+Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | node |
+| Access Type | Delete, Get |
+| Dynamic Node Naming | UniqueName: Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value. |
+
+
+
+
+
+
+
+
+
+#### Device/TrustedPublisher/{CertHash}/EncodedCertificate
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/TrustedPublisher/{CertHash}/EncodedCertificate
+```
+
+
+
+
+Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | b64 |
+| Access Type | Add, Get, Replace |
+
+
+
+
+
+
+
+
+
+#### Device/TrustedPublisher/{CertHash}/IssuedBy
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/TrustedPublisher/{CertHash}/IssuedBy
+```
+
+
+
+
+Returns the name of the certificate issuer. This is equivalent to the Issuer member in the [CERT_INFO data structure](/windows/win32/api/wincrypt/ns-wincrypt-cert_info).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### Device/TrustedPublisher/{CertHash}/IssuedTo
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/TrustedPublisher/{CertHash}/IssuedTo
+```
+
+
+
+
+Returns the name of the certificate subject. This is equivalent to the Subject member in the [CERT_INFO data structure](/windows/win32/api/wincrypt/ns-wincrypt-cert_info).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### Device/TrustedPublisher/{CertHash}/TemplateName
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/TrustedPublisher/{CertHash}/TemplateName
+```
+
+
+
+
+Returns the certificate template name. Supported operation is Get.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### Device/TrustedPublisher/{CertHash}/ValidFrom
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/TrustedPublisher/{CertHash}/ValidFrom
+```
+
+
+
+
+Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### Device/TrustedPublisher/{CertHash}/ValidTo
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/TrustedPublisher/{CertHash}/ValidTo
+```
+
+
+
+
+Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+## Device/UntrustedCertificates
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/UntrustedCertificates
+```
+
+
+
+
+Node for certificates that are not trusted. IT admin can use this node to immediately flag certificates that have been compromised and no longer usable.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | node |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+### Device/UntrustedCertificates/{CertHash}
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/UntrustedCertificates/{CertHash}
+```
+
+
+
+
+Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | node |
+| Access Type | Delete, Get |
+| Dynamic Node Naming | UniqueName: Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value. |
+
+
+
+
+
+
+
+
+
+#### Device/UntrustedCertificates/{CertHash}/EncodedCertificate
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/UntrustedCertificates/{CertHash}/EncodedCertificate
+```
+
+
+
+
+Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | b64 |
+| Access Type | Add, Get, Replace |
+
+
+
+
+
+
+
+
+
+#### Device/UntrustedCertificates/{CertHash}/IssuedBy
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/UntrustedCertificates/{CertHash}/IssuedBy
+```
+
+
+
+
+Returns the name of the certificate issuer. This is equivalent to the Issuer member in the [CERT_INFO data structure](/windows/win32/api/wincrypt/ns-wincrypt-cert_info).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### Device/UntrustedCertificates/{CertHash}/IssuedTo
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/UntrustedCertificates/{CertHash}/IssuedTo
+```
+
+
+
+
+Returns the name of the certificate subject. This is equivalent to the Subject member in the [CERT_INFO data structure](/windows/win32/api/wincrypt/ns-wincrypt-cert_info).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### Device/UntrustedCertificates/{CertHash}/TemplateName
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/UntrustedCertificates/{CertHash}/TemplateName
+```
+
+
+
+
+Returns the certificate template name. Supported operation is Get.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### Device/UntrustedCertificates/{CertHash}/ValidFrom
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/UntrustedCertificates/{CertHash}/ValidFrom
+```
+
+
+
+
+Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### Device/UntrustedCertificates/{CertHash}/ValidTo
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/RootCATrustedCertificates/UntrustedCertificates/{CertHash}/ValidTo
+```
+
+
+
+
+Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+## User/CA
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/CA
+```
+
+
+
+
+Node for CA certificates.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | node |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+### User/CA/{CertHash}
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/CA/{CertHash}
+```
+
+
+
+
+Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | node |
+| Access Type | Delete, Get |
+| Dynamic Node Naming | UniqueName: Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value. |
+
+
+
+
+
+
+
+
+
+#### User/CA/{CertHash}/EncodedCertificate
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/CA/{CertHash}/EncodedCertificate
+```
+
+
+
+
+Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | b64 |
+| Access Type | Add, Get, Replace |
+
+
+
+
+
+
+
+
+
+#### User/CA/{CertHash}/IssuedBy
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/CA/{CertHash}/IssuedBy
+```
+
+
+
+
+Returns the name of the certificate issuer. This is equivalent to the Issuer member in the [CERT_INFO data structure](/windows/win32/api/wincrypt/ns-wincrypt-cert_info).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### User/CA/{CertHash}/IssuedTo
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/CA/{CertHash}/IssuedTo
+```
+
+
+
+
+Returns the name of the certificate subject. This is equivalent to the Subject member in the [CERT_INFO data structure](/windows/win32/api/wincrypt/ns-wincrypt-cert_info).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### User/CA/{CertHash}/TemplateName
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/CA/{CertHash}/TemplateName
+```
+
+
+
+
+Returns the certificate template name. Supported operation is Get.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### User/CA/{CertHash}/ValidFrom
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/CA/{CertHash}/ValidFrom
+```
+
+
+
+
+Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### User/CA/{CertHash}/ValidTo
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/CA/{CertHash}/ValidTo
+```
+
+
+
+
+Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+## User/OemEsim
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 11, version 21H2 [10.0.22000] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/OemEsim
+```
+
+
+
+
+Node for OEM eSIM certificates.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | node |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+### User/OemEsim/{CertHash}
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 11, version 21H2 [10.0.22000] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/OemEsim/{CertHash}
+```
+
+
+
+
+Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | node |
+| Access Type | Delete, Get |
+| Dynamic Node Naming | UniqueName: Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value. |
+
+
+
+
+
+
+
+
+
+#### User/OemEsim/{CertHash}/EncodedCertificate
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 11, version 21H2 [10.0.22000] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/OemEsim/{CertHash}/EncodedCertificate
+```
+
+
+
+
+Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | b64 |
+| Access Type | Add, Get, Replace |
+
+
+
+
+
+
+
+
+
+#### User/OemEsim/{CertHash}/IssuedBy
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 11, version 21H2 [10.0.22000] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/OemEsim/{CertHash}/IssuedBy
+```
+
+
+
+
+Returns the name of the certificate issuer. This is equivalent to the Issuer member in the [CERT_INFO data structure](/windows/win32/api/wincrypt/ns-wincrypt-cert_info).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### User/OemEsim/{CertHash}/IssuedTo
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 11, version 21H2 [10.0.22000] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/OemEsim/{CertHash}/IssuedTo
+```
+
+
+
+
+Returns the name of the certificate subject. This is equivalent to the Subject member in the [CERT_INFO data structure](/windows/win32/api/wincrypt/ns-wincrypt-cert_info).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### User/OemEsim/{CertHash}/TemplateName
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 11, version 21H2 [10.0.22000] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/OemEsim/{CertHash}/TemplateName
+```
+
+
+
+
+Returns the certificate template name. Supported operation is Get.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### User/OemEsim/{CertHash}/ValidFrom
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 11, version 21H2 [10.0.22000] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/OemEsim/{CertHash}/ValidFrom
+```
+
+
+
+
+Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### User/OemEsim/{CertHash}/ValidTo
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 11, version 21H2 [10.0.22000] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/OemEsim/{CertHash}/ValidTo
+```
+
+
+
+
+Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+## User/TrustedPeople
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/TrustedPeople
+```
+
+
+
+
+Node for trusted people certificates.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | node |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+### User/TrustedPeople/{CertHash}
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/TrustedPeople/{CertHash}
+```
+
+
+
+
+Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | node |
+| Access Type | Delete, Get |
+| Dynamic Node Naming | UniqueName: Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value. |
+
+
+
+
+
+
+
+
+
+#### User/TrustedPeople/{CertHash}/EncodedCertificate
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/TrustedPeople/{CertHash}/EncodedCertificate
+```
+
+
+
+
+Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | b64 |
+| Access Type | Add, Get, Replace |
+
+
+
+
+
+
+
+
+
+#### User/TrustedPeople/{CertHash}/IssuedBy
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/TrustedPeople/{CertHash}/IssuedBy
+```
+
+
+
+
+Returns the name of the certificate issuer. This is equivalent to the Issuer member in the [CERT_INFO data structure](/windows/win32/api/wincrypt/ns-wincrypt-cert_info).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### User/TrustedPeople/{CertHash}/IssuedTo
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/TrustedPeople/{CertHash}/IssuedTo
+```
+
+
+
+
+Returns the name of the certificate subject. This is equivalent to the Subject member in the [CERT_INFO data structure](/windows/win32/api/wincrypt/ns-wincrypt-cert_info).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### User/TrustedPeople/{CertHash}/TemplateName
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/TrustedPeople/{CertHash}/TemplateName
+```
+
+
+
+
+Returns the certificate template name. Supported operation is Get.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### User/TrustedPeople/{CertHash}/ValidFrom
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/TrustedPeople/{CertHash}/ValidFrom
+```
+
+
+
+
+Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### User/TrustedPeople/{CertHash}/ValidTo
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/TrustedPeople/{CertHash}/ValidTo
+```
+
+
+
+
+Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+## User/TrustedPublisher
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/TrustedPublisher
+```
+
+
+
+
+Node for trusted publisher certificates.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | node |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+### User/TrustedPublisher/{CertHash}
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/TrustedPublisher/{CertHash}
+```
+
+
+
+
+Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | node |
+| Access Type | Delete, Get |
+| Dynamic Node Naming | UniqueName: Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value. |
+
+
+
+
+
+
+
+
+
+#### User/TrustedPublisher/{CertHash}/EncodedCertificate
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/TrustedPublisher/{CertHash}/EncodedCertificate
+```
+
+
+
+
+Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | b64 |
+| Access Type | Add, Get, Replace |
+
+
+
+
+
+
+
+
+
+#### User/TrustedPublisher/{CertHash}/IssuedBy
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/TrustedPublisher/{CertHash}/IssuedBy
+```
+
+
+
+
+Returns the name of the certificate issuer. This is equivalent to the Issuer member in the [CERT_INFO data structure](/windows/win32/api/wincrypt/ns-wincrypt-cert_info).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### User/TrustedPublisher/{CertHash}/IssuedTo
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/TrustedPublisher/{CertHash}/IssuedTo
+```
+
+
+
+
+Returns the name of the certificate subject. This is equivalent to the Subject member in the [CERT_INFO data structure](/windows/win32/api/wincrypt/ns-wincrypt-cert_info).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### User/TrustedPublisher/{CertHash}/TemplateName
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/TrustedPublisher/{CertHash}/TemplateName
+```
+
+
+
+
+Returns the certificate template name. Supported operation is Get.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### User/TrustedPublisher/{CertHash}/ValidFrom
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/TrustedPublisher/{CertHash}/ValidFrom
+```
+
+
+
+
+Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### User/TrustedPublisher/{CertHash}/ValidTo
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1511 [10.0.10586] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/TrustedPublisher/{CertHash}/ValidTo
+```
+
+
+
+
+Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+## User/UntrustedCertificates
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/UntrustedCertificates
+```
+
+
+
+
+Node for certificates that are not trusted. IT admin can use this node to immediately flag certificates that have been compromised and no longer usable.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | node |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+### User/UntrustedCertificates/{CertHash}
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/UntrustedCertificates/{CertHash}
+```
+
+
+
+
+Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | node |
+| Access Type | Delete, Get |
+| Dynamic Node Naming | UniqueName: Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value. |
+
+
+
+
+
+
+
+
+
+#### User/UntrustedCertificates/{CertHash}/EncodedCertificate
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/UntrustedCertificates/{CertHash}/EncodedCertificate
+```
+
+
+
+
+Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | b64 |
+| Access Type | Add, Get, Replace |
+
+
+
+
+
+
+
+
+
+#### User/UntrustedCertificates/{CertHash}/IssuedBy
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/UntrustedCertificates/{CertHash}/IssuedBy
+```
+
+
+
+
+Returns the name of the certificate issuer. This is equivalent to the Issuer member in the [CERT_INFO data structure](/windows/win32/api/wincrypt/ns-wincrypt-cert_info).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### User/UntrustedCertificates/{CertHash}/IssuedTo
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/UntrustedCertificates/{CertHash}/IssuedTo
+```
+
+
+
+
+Returns the name of the certificate subject. This is equivalent to the Subject member in the [CERT_INFO data structure](/windows/win32/api/wincrypt/ns-wincrypt-cert_info).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### User/UntrustedCertificates/{CertHash}/TemplateName
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/UntrustedCertificates/{CertHash}/TemplateName
+```
+
+
+
+
+Returns the certificate template name. Supported operation is Get.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### User/UntrustedCertificates/{CertHash}/ValidFrom
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/UntrustedCertificates/{CertHash}/ValidFrom
+```
+
+
+
+
+Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+#### User/UntrustedCertificates/{CertHash}/ValidTo
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
+
+
+
+```User
+./User/Vendor/MSFT/RootCATrustedCertificates/UntrustedCertificates/{CertHash}/ValidTo
+```
+
+
+
+
+Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Get |
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+## Related articles
+
+[Configuration service provider reference](configuration-service-provider-reference.md)
diff --git a/windows/client-management/mdm/rootcacertificates-ddf-file.md b/windows/client-management/mdm/rootcacertificates-ddf-file.md
index 9f73b6023a..d12b3ffc21 100644
--- a/windows/client-management/mdm/rootcacertificates-ddf-file.md
+++ b/windows/client-management/mdm/rootcacertificates-ddf-file.md
@@ -1,1990 +1,2284 @@
---
title: RootCATrustedCertificates DDF file
-description: Learn about the OMA DM device description framework (DDF) for the RootCACertificates configuration service provider (CSP).
-ms.reviewer:
+description: View the XML file containing the device description framework (DDF) for the RootCATrustedCertificates configuration service provider.
+author: vinaypamnani-msft
manager: aaroncz
ms.author: vinpa
-ms.topic: article
+ms.date: 02/24/2023
+ms.localizationpriority: medium
ms.prod: windows-client
ms.technology: itpro-manage
-author: vinaypamnani-msft
-ms.date: 03/07/2018
+ms.topic: reference
---
+
+
# RootCATrustedCertificates DDF file
-This topic shows the OMA DM device description framework (DDF) for the **RootCACertificates** configuration service provider. DDF files are used only with OMA DM provisioning XML.
-
-Looking for the DDF XML files? See [CSP DDF files download](configuration-service-provider-ddf.md).
-
-The XML below is for Windows 10, version 1803.
+The following XML file contains the device description framework (DDF) for the RootCATrustedCertificates configuration service provider.
```xml
-]>
+]>
1.2
+
+
+
+ RootCATrustedCertificates
+ ./User/Vendor/MSFT
+
+
+
+
+ The root node for the RootCATrustedCertificates configuration service provider.
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 10.0.10586
+ 1.0
+ 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBF;0xCA;0xCB;0xCD;
+
+
+
+ CA
+
+
+
+
+ Node for CA certificates.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
- RootCATrustedCertificates
- ./User/Vendor/MSFT
+
+
+
+ Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value
-
+
-
+
+ CertHash
- com.microsoft/1.1/MDM/RootCATrustedCertificates
+
+
+
+
+
+ Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
+
- Root
+ EncodedCertificate
+
+
+ Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
-
+
-
+
-
-
-
-
+
+
+
-
-
-
-
-
-
-
- Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
-
-
-
-
-
-
-
-
-
-
-
-
- CertHash
-
-
-
-
-
- EncodedCertificate
-
-
-
-
-
-
- Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- IssuedBy
-
-
-
-
- Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- IssuedTo
-
-
-
-
- Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- ValidFrom
-
-
-
-
- Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- ValidTo
-
-
-
-
- Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- TemplateName
-
-
-
-
- Returns the certificate template name. Supported operation is Get.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- CA
+ IssuedBy
+ Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure.
-
+
-
+
-
-
-
-
+
-
-
-
-
-
-
-
- Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
-
-
-
-
-
-
-
-
-
-
-
-
- CertHash
-
-
-
-
-
- EncodedCertificate
-
-
-
-
-
-
- Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- IssuedBy
-
-
-
-
- Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure.
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- IssuedTo
-
-
-
-
- Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure.
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- ValidFrom
-
-
-
-
- Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- ValidTo
-
-
-
-
- Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure.
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- TemplateName
-
-
-
-
- Returns the certificate template name. Supported operation is Get.
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- TrustedPublisher
+ IssuedTo
+ Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure.
-
+
-
+
-
-
-
-
+
-
-
-
-
-
-
-
- Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
-
-
-
-
-
-
-
-
-
-
-
-
- CertHash
-
-
-
-
-
- EncodedCertificate
-
-
-
-
-
-
- Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- IssuedBy
-
-
-
-
- Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- IssuedTo
-
-
-
-
- Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- ValidFrom
-
-
-
-
- Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- ValidTo
-
-
-
-
- Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- TemplateName
-
-
-
-
- Returns the certificate template name. Supported operation is Get.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- TrustedPeople
+ ValidFrom
+ Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
-
+
-
+
-
-
-
-
+
-
-
-
-
-
-
-
- Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
-
-
-
-
-
-
-
-
-
-
-
-
- CertHash
-
-
-
-
-
- EncodedCertificate
-
-
-
-
-
-
- Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- IssuedBy
-
-
-
-
- Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- IssuedTo
-
-
-
-
- Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- ValidFrom
-
-
-
-
- Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- ValidTo
-
-
-
-
- Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- TemplateName
-
-
-
-
- Returns the certificate template name. Supported operation is Get.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- UntrustedCertificates
+ ValidTo
+ Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure
-
+
-
+
-
-
-
-
+
+
+
+
+
+ TemplateName
+
+
+
+
+ Returns the certificate template name. Supported operation is Get.
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
- Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
-
-
-
-
-
-
-
-
-
-
-
-
- CertHash
-
-
-
-
-
- EncodedCertificate
-
-
-
-
-
-
- Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- IssuedBy
-
-
-
-
- Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- IssuedTo
-
-
-
-
- Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- ValidFrom
-
-
-
-
- Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- ValidTo
-
-
-
-
- Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- TemplateName
-
-
-
-
- Returns the certificate template name. Supported operation is Get.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
+
+
+ OemEsim
+
+
+
+
+ Node for OEM eSIM certificates.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 10.0.22000
+ 1.2
+
+
- RootCATrustedCertificates
- ./Device/Vendor/MSFT
+
+
+
+ Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value
-
+
-
+
+ CertHash
- com.microsoft/1.1/MDM/RootCATrustedCertificates
+
+
+
+
+
+ Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
+
- Root
+ EncodedCertificate
+
+
+ Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
-
+
-
+
+
+
+
-
-
-
+
+
-
-
-
-
-
-
-
- Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
-
-
-
-
-
-
-
-
-
-
-
-
- CertHash
-
-
-
-
-
- EncodedCertificate
-
-
-
-
-
-
- Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- IssuedBy
-
-
-
-
- Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- IssuedTo
-
-
-
-
- Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- ValidFrom
-
-
-
-
- Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- ValidTo
-
-
-
-
- Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- TemplateName
-
-
-
-
- Returns the certificate template name. Supported operation is Get.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- CA
+ IssuedBy
+ Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure.
-
+
-
+
+
+
+
-
-
-
-
-
-
-
-
-
-
- Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
-
-
-
-
-
-
-
-
-
-
-
-
- CertHash
-
-
-
-
-
- EncodedCertificate
-
-
-
-
-
-
- Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- IssuedBy
-
-
-
-
- Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure.
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- IssuedTo
-
-
-
-
- Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure.
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- ValidFrom
-
-
-
-
- Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- ValidTo
-
-
-
-
- Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure.
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- TemplateName
-
-
-
-
- Returns the certificate template name. Supported operation is Get.
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- TrustedPublisher
+ IssuedTo
+ Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure.
-
+
-
+
+
+
+
-
-
-
-
-
-
-
-
-
-
- Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
-
-
-
-
-
-
-
-
-
-
-
-
- CertHash
-
-
-
-
-
- EncodedCertificate
-
-
-
-
-
-
- Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- IssuedBy
-
-
-
-
- Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- IssuedTo
-
-
-
-
- Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- ValidFrom
-
-
-
-
- Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- ValidTo
-
-
-
-
- Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- TemplateName
-
-
-
-
- Returns the certificate template name. Supported operation is Get.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- TrustedPeople
+ ValidFrom
+ Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
-
+
-
+
+
+
+
-
-
-
-
-
-
-
-
-
-
- Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
-
-
-
-
-
-
-
-
-
-
-
-
- CertHash
-
-
-
-
-
- EncodedCertificate
-
-
-
-
-
-
- Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- IssuedBy
-
-
-
-
- Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- IssuedTo
-
-
-
-
- Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- ValidFrom
-
-
-
-
- Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- ValidTo
-
-
-
-
- Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- TemplateName
-
-
-
-
- Returns the certificate template name. Supported operation is Get.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- UntrustedCertificates
+ ValidTo
+ Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure
-
+
-
+
+
+
+
+
+
+
+
+
+
+ TemplateName
+
+
+
+
+ Returns the certificate template name. Supported operation is Get.
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
- Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
-
-
-
-
-
-
-
-
-
-
-
-
- CertHash
-
-
-
-
-
- EncodedCertificate
-
-
-
-
-
-
- Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- IssuedBy
-
-
-
-
- Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- IssuedTo
-
-
-
-
- Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- ValidFrom
-
-
-
-
- Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- ValidTo
-
-
-
-
- Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
- TemplateName
-
-
-
-
- Returns the certificate template name. Supported operation is Get.
-
-
-
-
-
-
-
-
-
-
-
-
-
- text/plain
-
-
-
-
+
+
+ TrustedPublisher
+
+
+
+
+ Node for trusted publisher certificates.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value
+
+
+
+
+
+
+
+
+
+ CertHash
+
+
+
+
+
+
+
+ Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
+
+
+
+ EncodedCertificate
+
+
+
+
+
+
+ Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ IssuedBy
+
+
+
+
+ Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ IssuedTo
+
+
+
+
+ Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ValidFrom
+
+
+
+
+ Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ValidTo
+
+
+
+
+ Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ TemplateName
+
+
+
+
+ Returns the certificate template name. Supported operation is Get.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ TrustedPeople
+
+
+
+
+ Node for trusted people certificates.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value
+
+
+
+
+
+
+
+
+
+ CertHash
+
+
+
+
+
+
+
+ Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
+
+
+
+ EncodedCertificate
+
+
+
+
+
+
+ Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ IssuedBy
+
+
+
+
+ Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ IssuedTo
+
+
+
+
+ Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ValidFrom
+
+
+
+
+ Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ValidTo
+
+
+
+
+ Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ TemplateName
+
+
+
+
+ Returns the certificate template name. Supported operation is Get.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ UntrustedCertificates
+
+
+
+
+ Node for certificates that are not trusted. IT admin can use this node to immediately flag certificates that have been compromised and no longer usable.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 10.0.17134
+ 1.1
+
+
+
+
+
+
+
+
+
+
+ Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value
+
+
+
+
+
+
+
+
+
+ CertHash
+
+
+
+
+
+
+
+ Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
+
+
+
+ EncodedCertificate
+
+
+
+
+
+
+ Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ IssuedBy
+
+
+
+
+ Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ IssuedTo
+
+
+
+
+ Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ValidFrom
+
+
+
+
+ Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ValidTo
+
+
+
+
+ Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ TemplateName
+
+
+
+
+ Returns the certificate template name. Supported operation is Get.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ RootCATrustedCertificates
+ ./Device/Vendor/MSFT
+
+
+
+
+ The root node for the RootCATrustedCertificates configuration service provider.
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 10.0.10586
+ 1.0
+ 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBF;0xCA;0xCB;0xCD;
+
+
+
+ Root
+
+
+
+
+ Defines the certificate store that contains root, or self-signed certificates, in this case, the computer store.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value
+
+
+
+
+
+
+
+
+
+ CertHash
+
+
+
+
+
+
+
+
+ EncodedCertificate
+
+
+
+
+
+
+ Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
+
+
+
+
+
+
+ IssuedBy
+
+
+
+
+ Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ IssuedTo
+
+
+
+
+ Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ValidFrom
+
+
+
+
+ Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ValidTo
+
+
+
+
+ Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ TemplateName
+
+
+
+
+ Returns the certificate template name. Supported operation is Get.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ CA
+
+
+
+
+ Node for CA certificates.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value
+
+
+
+
+
+
+
+
+
+ CertHash
+
+
+
+
+
+
+
+ Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
+
+
+
+ EncodedCertificate
+
+
+
+
+
+
+ Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ IssuedBy
+
+
+
+
+ Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ IssuedTo
+
+
+
+
+ Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ValidFrom
+
+
+
+
+ Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ValidTo
+
+
+
+
+ Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ TemplateName
+
+
+
+
+ Returns the certificate template name. Supported operation is Get.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ OemEsim
+
+
+
+
+ Node for OEM eSIM certificates.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 10.0.22000
+ 1.2
+
+
+
+
+
+
+
+
+
+
+ Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value
+
+
+
+
+
+
+
+
+
+ CertHash
+
+
+
+
+
+
+
+ Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
+
+
+
+ EncodedCertificate
+
+
+
+
+
+
+ Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ IssuedBy
+
+
+
+
+ Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ IssuedTo
+
+
+
+
+ Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ValidFrom
+
+
+
+
+ Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ValidTo
+
+
+
+
+ Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ TemplateName
+
+
+
+
+ Returns the certificate template name. Supported operation is Get.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ TrustedPublisher
+
+
+
+
+ Node for trusted publisher certificates.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value
+
+
+
+
+
+
+
+
+
+ CertHash
+
+
+
+
+
+
+
+ Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
+
+
+
+ EncodedCertificate
+
+
+
+
+
+
+ Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ IssuedBy
+
+
+
+
+ Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ IssuedTo
+
+
+
+
+ Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ValidFrom
+
+
+
+
+ Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ValidTo
+
+
+
+
+ Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ TemplateName
+
+
+
+
+ Returns the certificate template name. Supported operation is Get.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ TrustedPeople
+
+
+
+
+ Node for trusted people certificates.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value
+
+
+
+
+
+
+
+
+
+ CertHash
+
+
+
+
+
+
+
+ Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
+
+
+
+ EncodedCertificate
+
+
+
+
+
+
+ Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ IssuedBy
+
+
+
+
+ Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ IssuedTo
+
+
+
+
+ Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ValidFrom
+
+
+
+
+ Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ValidTo
+
+
+
+
+ Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ TemplateName
+
+
+
+
+ Returns the certificate template name. Supported operation is Get.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ UntrustedCertificates
+
+
+
+
+ Node for certificates that are not trusted. IT admin can use this node to immediately flag certificates that have been compromised and no longer usable.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 10.0.17134
+ 1.1
+
+
+
+
+
+
+
+
+
+
+ Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value
+
+
+
+
+
+
+
+
+
+ CertHash
+
+
+
+
+
+
+
+ Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
+
+
+
+ EncodedCertificate
+
+
+
+
+
+
+ Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ IssuedBy
+
+
+
+
+ Returns the name of the certificate issuer. This is equivalent to the Issuer member in the CERT_INFO data structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ IssuedTo
+
+
+
+
+ Returns the name of the certificate subject. This is equivalent to the Subject member in the CERT_INFO data structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ValidFrom
+
+
+
+
+ Returns the starting date of the certificate's validity. Supported operation is Get. This is equivalent to the NotBefore member in the CERT_INFO structure.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ValidTo
+
+
+
+
+ Returns the expiration date of the certificate. Supported operation is Get. This is equivalent to the NotAfter member in the CERT_INFO structure
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ TemplateName
+
+
+
+
+ Returns the certificate template name. Supported operation is Get.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
```
-## Related topics
+## Related articles
-[RootCATrustedCertificates CSP](rootcacertificates-csp.md)
\ No newline at end of file
+[RootCATrustedCertificates configuration service provider reference](rootcacertificates-csp.md)