ICertConfig2 interface (certcli.h)

The ICertConfig2 interface is one of two interfaces that provide functionality for retrieving the public configuration data (specified during client setup) for a Certificate Services server.

The ICertConfig2 interface is used to perform the following tasks:

  • Enumerate through the configuration strings for a Certificate Services server.
  • Retrieve the default configuration for a Certificate Services server.
  • Retrieve the details of a specific Certificate Services server configuration.
  • Reset the configuration of a Certificate Services server.
  • Specify a new path for the shared folder.

For each installation of Certificate Services, this public configuration data resides in the Certsrv.txt file, which exists in the shared folder, the Active Directory, or both. Any server set up to post its configuration information in Certsrv.txt is visible to ICertConfig2.

ICertConfig2 is defined in Certcli.h. When you create your program, however, use Certsrv.h as the include file. Certcli.dll provides the ICertConfig2 interface. In Windows Server 2003 and later operating systems, the type information for this interface is also in Certclil.dll, which is shipped with the Platform Software Development Kit (SDK).

Certificate Services interfaces support both apartment-threading and free-threading models. For better throughput, free threading is recommended.


The ICertConfig2 interface inherits from ICertConfig and IDispatch. ICertConfig2 also has these types of members:


The ICertConfig2 interface has these methods.


Specifies the path to be used as the certification authority's (CA) shared folder.


Minimum supported client None supported
Minimum supported server Windows Server 2003 [desktop apps only]
Target Platform Windows
Header certcli.h (include Certsrv.h)