Writing Secure Code for Windows Vista (Best Practices (Microsoft))

The following cryptographic features are deprecated or not supported on Windows Vista:

• The XEnroll and SCdEnrl COM objects are no longer included with Windows Vista; you should use the CertEnroll API instead (Microsoft 2006b).

• Beginning with Windows Vista, CAPICOM, the COM interface to CryptoAPI, is no longer supported. If you want to use a higher-level API, you should use the .NET Framework.

• WinVerifyTrust should no longer be used for certificate verification; rather you should use the CertGetCertificateChain function call instead.