HardwareToken.Certificate Property

Definition

Namespace:

Windows.System.Profile

Gets the certificate that is used to sign the Id and is used to help verify the authenticity of the Id.

public:
 property IBuffer ^ Certificate { IBuffer ^ get(); };

IBuffer Certificate();

public IBuffer Certificate { get; }

var iBuffer = hardwareToken.certificate;

Public ReadOnly Property Certificate As IBuffer

Property Value

IBuffer

The certificate used to sign the Id.

Remarks

The buffer contains a PKCS#7 formatted certificate chain, not a single certificate. The chain is rooted at the Microsoft Assurance Designation Root 2011 certificate. The leaf certificate carries the extended key usage (EKU) OID 1.3.6.1.4.1.311.10.5.40.

When validating this chain in a cloud service, enable revocation checking for all certificates in the chain. The Microsoft Assurance Designation Root 2011 root certificate must be present in the trusted root store on the server.

For the full cloud-side verification workflow, see Guidance on using the App Specific Hardware ID (ASHWID) to implement per-device app logic.

See also

• Signature
• Id
• Guidance on using the App Specific Hardware ID (ASHWID) to implement per-device app logic