3.10.4.10 RetrieveClusterCertV2 (Opnum 15)

The RetrieveClusterCertV2 method<39> SHOULD return the certificate and cluster secret stored on the server.

 HRESULT RetrieveClusterCertV2 {
   [ out ] CLUSTER_CERT* ClusterCert,
   [ in ] CLUSTER_CERTTYPE certType
 };

ClusterCert: The certificate and cluster secret for the cluster that is stored in the node. The CLUSTER_CERT structure is defined in section 2.2.23.

CertType: Type of certificate used by the cluster, as specified in section 2.2.26.

Return Values: A signed 32-bit value that indicates return status. If the method returns a negative value, it has failed. Zero or positive values indicate success, with the lower 16 bits in positive nonzero values containing warnings or flags defined in the method implementation. For more information about Win32 error codes and HRESULT values, see [MS-ERREF] sections 2.1 and 2.2.

Return value/code

Description

0x00000000

S_OK

The call was successful.

0x80070002

ERROR_FILE_NOT_FOUND

The certificate or cluster secret has not yet been configured by a previous call to ConfigClusterCertV2.

For any other condition, this method MUST return a value that is not one of the values listed in the preceding table. The client MUST behave in one consistent, identical manner for all values that are not listed in the preceding table.

Exceptions Thrown: No exceptions are thrown beyond those thrown by the underlying RPC protocol [MS-RPCE].

The opnum field value for this method is 15.

When processing this call, the server MUST do the following:

  • If certType is Cluster_SChannel or ClusterSet_SChannel, retrieve the certificate and cluster secret from storage in an implementation-specific manner.

  • If certType is Cluster_PKU2U or ClusterSet_PKU2U, retrieve the certificate and cluster secret from the PKU2U local root store in an implementation-specific manner.

  • If the certificate or cluster secret was not previously set by a call to ConfigClusterCertV2, the server MUST return 0x80070002 (ERROR_FILE_NOT_FOUND).

The server returns the certificate and cluster secret to the client.