bEARightsDisabled: A little-endian encoded DWORD. This value MUST be 0x00000000. There is no padding or DWORD boundary requirement. If Officer rights are disabled and Enrollment Agent rights are enabled, the pb member of the CERTTRANSBLOB structure refers to the following marshaled structure. struct { DWORD bEARightEnabled; SECURITY_DESCRIPTOR EnrollmentAgentRights; }; Member Value bEARightsEnabled Must be nonzero. EnrollAgentRights bEARightsEnabled: A little-endian encoded DWORD. This value MUST be nonzero. Enrollment Agent Rights: A marshaled security descriptor for Enrollment Agent rights. There is no padding or DWORD boundary requirement. If Officer rights are enabled and Enrollment Agent rights are enabled, the pb member of the CERTTRANSBLOB structure refers to the following marshaled structure. struct { SECURITY_DESCRIPTOR OfficerRights; DWORD bEARightEnabled; SECURITY_DESCRIPTOR EnrollmentAgentRights; }; Member Value OfficerRights bEARightsEnabled Must be nonzero. EnrollAgentRights OfficerRights: A marshaled security descriptor for Officer rights. bEARightsEnabled: A little-endian encoded DWORD. The value MUST be nonzero. Enrollment Agent Rights: A marshaled security descriptor for Enrollment Agent rights. There is no padding or DWORD boundary requirement. CERTTIME The CERTTIME type consists of a 64-bit value that represents the number of 100-nanosecond intervals since January 1, 1601 (the start of the Gregorian calendar), according to .
bEARightsDisabled: A little-endian encoded DWORD. This value MUST be 0x00000000. There is no padding or DWORD boundary requirement. If Officer rights are disabled and Enrollment Agent rights are enabled, the pb member of the CERTTRANSBLOB structure refers to the following marshaled structure. struct { DWORD bEARightEnabled; SECURITY_DESCRIPTOR EnrollmentAgentRights; }; Member Value bEARightsEnabled Must be nonzero. EnrollAgentRights bEARightsEnabled: A little-endian encoded DWORD. This value MUST be nonzero. Enrollment Agent Rights: A marshaled security descriptor for Enrollment Agent rights. There is no padding or DWORD boundary requirement. If Officer rights are enabled and Enrollment Agent rights are enabled, the pb member of the CERTTRANSBLOB structure refers to the following marshaled structure. struct { SECURITY_DESCRIPTOR OfficerRights; DWORD bEARightEnabled; SECURITY_DESCRIPTOR EnrollmentAgentRights; }; Member Value OfficerRights bEARightsEnabled Must be nonzero. EnrollAgentRights OfficerRights: A marshaled security descriptor for Officer rights. bEARightsEnabled: A little-endian encoded DWORD. The value MUST be nonzero. Enrollment Agent Rights: A marshaled security descriptor for Enrollment Agent rights. There is no padding or DWORD boundary requirement. CERTTIME The CERTTIME type consists of a 64-bit value that represents the number of 100-nanosecond intervals since January 1, 1601 (the start of the Gregorian calendar), according to .
%5BMS-CSRA%5D-171201.docx