<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved.">
  <assemblyIdentity name="Microsoft-Windows-Security-Certificate-Policy-Engine" version="10.0.26100.8521" processorArchitecture="amd64" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <dependency discoverable="no" resourceType="Resources">
    <dependentAssembly dependencyType="prerequisite">
      <assemblyIdentity name="Microsoft-Windows-Security-Certificate-Policy-Engine.Resources" version="10.0.26100.8521" processorArchitecture="amd64" language="*" buildType="release" publicKeyToken="31bf3856ad364e35" />
    </dependentAssembly>
  </dependency>
  <file name="CertPolEng.dll" destinationPath="$(runtime.system32)\" sourceName="CertPolEng.dll" importPath="$(build.nttree)\" sourcePath=".\">
    <dependencies />
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
      <dsig:Transforms>
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue>dtCrVE6elM6lURjLEsTHMaTgKC1N4IsxiCKLBrqMG4E=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <trustInfo>
    <security>
      <accessControl>
        <securityDescriptorDefinitions>
          <securityDescriptorDefinition name="WRP_FILE_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;GRGX;;;BA)(A;;GRGX;;;SY)(A;;GRGX;;;BU)(A;;GRGX;;;S-1-15-2-1)(A;;GRGX;;;S-1-15-2-2)S:(AU;FASA;0x000D0116;;;WD)" operationHint="replace" />
          <securityDescriptorDefinition name="WRP_KEY_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CI;GR;;;SY)(A;CI;GR;;;BA)(A;CI;GR;;;BU)(A;CI;GR;;;S-1-15-2-1)(A;CI;GR;;;S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681)" operationHint="replace" />
          <securityDescriptorDefinition name="ADMIN__FULL_ACCESS_SDDL" sddl="O:BAG:SYD:(A;;GA;;;BA)(A;;GA;;;SY)(A;;GRGX;;;BU)(A;;GRGX;;;S-1-15-2-1)" operationHint="replace" />
        </securityDescriptorDefinitions>
      </accessControl>
    </security>
  </trustInfo>
  <instrumentation xmlns:win="http://manifests.microsoft.com/win/2004/08/windows/events">
    <events xmlns="http://schemas.microsoft.com/win/2004/08/events">
      <provider guid="{AF9CC194-E9A8-42BD-B0D1-834E9CFAB799}" message="$(string.EventProviderName)" messageFileName="%SystemRoot%\System32\CertPolEng.dll" name="Microsoft-Windows-CertPolEng" resourceFileName="%SystemRoot%\System32\CertPolEng.dll" symbol="Microsoft_Windows_CertPolEng">
        <channels>
          <channel chid="Operational" enabled="false" isolation="Application" message="$(string.operationalChannelName)" name="Microsoft-Windows-CertPoleEng/Operational" type="Operational" />
        </channels>
      </provider>
      <cmi />
    </events>
  </instrumentation>
  <localization>
    <resources culture="en-US">
      <stringTable>
        <string id="description" value="Manifest for CertPolEng.dll" />
        <string id="displayName" value="CertPolEng.dll" />
        <string id="EventProviderName" value="CertPolEng" />
        <string id="operationalChannelName" value="Operation log" />
        <string id="EnteringFunction" value="Entering Function %1" />
        <string id="ExitingFunction" value="Exiting Function %1" />
        <string id="FunctionName_Returned_Error" value="%1 failed with return code %2" />
        <string id="FunctionName_Returned" value="%1 returned %2" />
        <string id="Not_Running_In_LSA" value="Not running inside LSA" />
        <string id="Running_In_LSA" value="Running inside LSA" />
        <string id="Cert_Store_Changed" value="Cert Store changes are detected" />
        <string id="No_OnLine_Prov" value="No online providers are installed" />
        <string id="No_TA_PROV" value="There are no trust anchors for the providers" />
        <string id="Total_TA_Found" value="Total number of TrustRoot Found %1" />
        <string id="TargetNameAndHostName" value="Target name is %1, HostName is %2" />
        <string id="GetCertParam" value="PSTGetCertificate called, number of select criteria are %1, bIsClient parameter is %2" />
        <string id="OpeningMachStore" value="Opening Machine Store? Value: %1" />
        <string id="ExpiredCertFound" value="Expired cert found" />
        <string id="ProvNotFound" value="Unable to find Provider From Certificate: Error %1" />
        <string id="CallingLRPC" value="Calling LRPC cert renewal Interface %1" />
        <string id="ExpireCertCallCertSelAgain" value="Expired Certificate were found, will call CertSelectCertificateChains again" />
        <string id="NoCertsFound" value="No matching Certificate were found" />
        <string id="HomeGroupSpecialCase" value="Will Special case for Homegroup self sign certificates" />
        <string id="GetCertFoundCerts" value="GetCertificates returning %1 certificates" />
        <string id="RIPolicySpecified" value="RequestIssuancePolicy Is Specified" />
        <string id="CertIsSelfSigned" value="Certificate is Self Signed" />
        <string id="CertFoundInContainer" value="Certificate found in HomeGroup Container" />
        <string id="CheckProvFromCert" value="Checking if the Certificate is from one of the Providers" />
        <string id="CertSubjectName" value="Cert Subject name is %1" />
        <string id="UserName" value="UserName is %1" />
        <string id="FailedToConnectToLRPC" value="Failed to Connect to %1 " />
        <string id="LRPCEnpointMissing" value="CProviderEntry::ReadInfoFromRegistry LRPC Entrypoint is missing for provider %1. Error code %2" />
        <string id="FailedToOpenProvRoot" value="Failed to Open Provider Root Key %1" />
        <string id="FailedToOpenLSAPolicyRoot" value="Failed to open LSA Registry Root Key %1" />
        <string id="Pku2uDisabled" value="Pku2u is disabled by policy" />
        <string id="FailedToQueryProvRoot" value="Failed to Query Provider Root Key %1" />
        <string id="FailedToQueryProvRootSubKey" value="Failed to Query SubKey %1, Error %2" />
        <string id="InvalidProvGuid" value="Invalid Provider GUID %1. %2" />
        <string id="CertVerifyFailed" value="CertVerifyCertificateChainPolicy Failed Status is %1, ChainIndex %2, lElementIndex %3" />
        <string id="CertOpenStoreFailed" value="Failed to open %1 certificate store. Error %2" />
        <string id="CertHashLenNotMatch" value="Failed to validate certificate. Hash length doesn't match. Source hash Length %1, calculated hash length %2" />
        <string id="CertHashFailure" value="Failed to validate certificate. The hash comparison failed" />
        <string id="CertHashMatched" value="Certificate validation succeeded as the hash comparison succeeded" />
        <string id="ClientValidationSkipped" value="UPN and client RDN are missing" />
        <string id="CertUPNNotMatched" value="The client name doesn't match the UPN. UPN is %1, client name is %2" />
        <string id="CertUPNMatched" value="The client name matched the UPN. UPN is %1, client name is %2" />
        <string id="ValidateClientName" value="The client name is %1" />
        <string id="CertNotFoundInHGContainer" value="Unable to find the certificate in the HomeGroup Container" />
        <string id="CertRootIsNotTrusted" value="The certificate chains to an untrusted root" />
        <string id="NonUPNExplicitCreds" value="The supplied or saved credman credential with username %1 is not a UPN." />
        <string id="ProviderNotEnabled" value="%1 Provider is not enabled." />
        <string id="PrivateKeyNotFound" value="Failed for Certificate (encoding=%1,length=%2,value=%3)." />
      </stringTable>
    </resources>
  </localization>
  <registryKeys>
    <registryKey keyName="HKEY_LOCAL_MACHINE\Software\Microsoft\IdentityStore\Providers\{6D0F37E4-4FAC-4E44-9C07-6B8343FE4953}">
      <registryValue name="Name" valueType="REG_SZ" value="." />
      <registryValue name="TrustedRootContainer" valueType="REG_SZ" value="Local Cert Issuer" />
      <securityDescriptor name="WRP_KEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\Software\Microsoft\IdentityStore\LoadParameters\{6D0F37E4-4FAC-4E44-9C07-6B8343FE4953}">
      <securityDescriptor name="ADMIN__FULL_ACCESS_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\Software\Microsoft\IdentityStore\Providers\{E6284137-3900-4B85-97D1-51C9ff2ACEF0}">
      <registryValue name="Name" valueType="REG_SZ" value="." />
      <registryValue name="TrustedRootContainer" valueType="REG_SZ" value="Container Cert Issuer" />
      <securityDescriptor name="WRP_KEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\Software\Microsoft\IdentityStore\LoadParameters\{E6284137-3900-4B85-97D1-51C9ff2ACEF0}">
      <securityDescriptor name="ADMIN__FULL_ACCESS_SDDL" />
    </registryKey>
  </registryKeys>
</assembly>