windows-itpro-docs/windows/client-management/mdm/rootcacertificates-csp.md
Nicholas Brower 1ae3f0b230 Merged PR 4822: "msdate update (generated from most recent commit date)"
"msdate update (generated from most recent commit date)"
2017-12-05 22:36:05 +00:00

95 lines
3.3 KiB
Markdown
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

---
title: RootCATrustedCertificates CSP
description: RootCATrustedCertificates CSP
ms.assetid: F2F25DEB-9DB3-40FB-BC3C-B816CE470D61
ms.author: maricia
ms.topic: article
ms.prod: w10
ms.technology: windows
author: nickbrower
ms.date: 06/26/2017
---
# RootCATrustedCertificates CSP
The RootCATrustedCertificates configuration service provider enables the enterprise to set the Root Certificate Authority (CA) certificates.
> [!Note]
> The **./User/** configuration is not supported for **RootCATrustedCertificates/Root/**.
 
The following image shows the RootCATrustedCertificates configuration service provider in tree format.
![roocacertificate](images/provisioning-csp-rootcacertificate.png)
<a href="" id="device-or-user"></a>**Device or User**
For device certificates, use **./Device/Vendor/MSFT** path and for user certificates use **./User/Vendor/MSFT** path.
<a href="" id="rootcatrustedcertificates"></a>**RootCATrustedCertificates**
The root node for the RootCATrustedCertificates configuration service provider.
<a href="" id="rootcatrustedcertificates-root-"></a>**RootCATrustedCertificates/Root/**
Defines the certificate store that contains root, or self-signed certificates, in this case, the computer store.
> [!Note]
> The **./User/** configuration is not supported for **RootCATrustedCertificates/Root/**.
 
<a href="" id="rootcatrustedcertificates-ca"></a>**RootCATrustedCertificates/CA**
Node for CA certificates.
<a href="" id="rootcatrustedcertificates-trustedpublisher"></a>**RootCATrustedCertificates/TrustedPublisher**
Node for trusted publisher certificates.
<a href="" id="rootcatrustedcertificates-trustedpeople"></a>**RootCATrustedCertificates/TrustedPeople**
Node for trusted people certificates.
<a href="" id="certhash"></a>**_CertHash_**
Defines the SHA1 hash for the certificate. The 20-byte value of the SHA1 certificate hash is specified as a hexadecimal string value.
The supported operations are Get and Delete.
<a href="" id="-encodedcertificate"></a>**/EncodedCertificate**
Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.
The supported operations are Add, Get, and Replace.
<a href="" id="-issuedby"></a>**/IssuedBy**
Returns the name of the certificate issuer. This is equivalent to the **Issuer** member in the CERT\_INFO data structure.
The only supported operation is Get.
<a href="" id="-issuedto"></a>**/IssuedTo**
Returns the name of the certificate subject. This is equivalent to the **Subject** member in the CERT\_INFO data structure.
The only supported operation is Get.
<a href="" id="-validfrom"></a>**/ValidFrom**
Returns the starting date of the certificate's validity. This is equivalent to the **NotBefore** member in the CERT\_INFO data structure.
The only supported operation is Get.
<a href="" id="-validto"></a>**/ValidTo**
Returns the expiration date of the certificate. This is equivalent to the **NotAfter** member in the CERT\_INFO data structure.
The only supported operation is Get.
<a href="" id="-templatename"></a>**/TemplateName**
Returns the certificate template name.
The only supported operation is Get.
## Related topics
[Configuration service provider reference](configuration-service-provider-reference.md)