ADCS.CertMod.Managed.NDES Namespace

Contains functionality related to NDES policy modules.

Classes

DefaultSCEPChallengeGenerator Represents a default NDES challenge password generator that uses FIPS-compliant RNGCryptoServiceProvider to generate cryptographically random challenge password. Produced password is then formatted as a hexadecimal string.
DefaultSCEPChallengeStore Represents a thread-safe default implementation of SCEP challenge password store/cache. Key properties are:
  • Can be limited in size. By default, cache size is unlimited.
  • Transient. Erased when NDES application pool is recycled or stopped.
  • Do not bind challenge password to template.
NdesPolicyBase Represents a base implementation of AD CS Network Device Enrollment Service policy module.
SCEPChallengeStoreEntry Represents SCEP challenge password store (cache) entry.

Interfaces

INDESPolicy The NDES Policy Module Interface. When installed against an enterprise CA, NDES generates a password after checking that the user has enrollment permission on the configured NDES templates, both user and machine templates.
ISCEPChallengeGenerator Represents NDES challenge password generator.
ISCEPChallengeStore Represents NDES challenge password store definition.

Enumerations

SCEPDisposition Represents SCEP disposition enumeration (request resolution status).