<div class="content"><p align="right"><a href="https://msdn.microsoft.com/en-us/library/76e40962-cdfd-4772-acd6-28b06b2f7ad5" data-linktype="external">msdn link</a></p><p>The Client-Side-Wrapped_Secret structure MUST be used by the
client to represent a secret wrapped using the server&#39;s <a href="32d60aa4-e40c-414a-986c-db731aca7e71#gt_4cf96ca0-e3a9-4165-8d1a-a21b1397007a" data-linktype="relative-path">public key</a>, as specified in
section <a href="cfe5dba9-8cc9-4765-9b67-c5e1deae0af8" data-linktype="relative-path">3.2.4.1</a>.</p><table>
 <tbody><tr>
  <th><p><br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>1<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>2<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>3<br/>0</p></th>
  <th><p><br/>1</p></th>
 </tr>
 <tr>
  <td colspan="32">
  <p>dwVersion</p>
  </td>
 </tr>
 <tr>
  <td colspan="32">
  <p>cbEncryptedSecret</p>
  </td>
 </tr>
 <tr>
  <td colspan="32">
  <p>cbAccessCheck</p>
  </td>
 </tr>
 <tr>
  <td colspan="32">
  <p>guidKey (16 bytes)</p>
  </td>
 </tr>
 <tr>
  <td colspan="32">
  <p>...</p>
  </td>
 </tr>
 <tr>
  <td colspan="32">
  <p>...</p>
  </td>
 </tr>
 <tr>
  <td colspan="32">
  <p>EncryptedSecret (variable)</p>
  </td>
 </tr>
 <tr>
  <td colspan="32">
  <p>...</p>
  </td>
 </tr>
 <tr>
  <td colspan="32">
  <p>AccessCheck (variable)</p>
  </td>
 </tr>
 <tr>
  <td colspan="32">
  <p>...</p>
  </td>
 </tr>
</tbody></table><p><b>dwVersion (4 bytes): </b>A 32-bit unsigned
integer. This field MUST be encoded using <a href="32d60aa4-e40c-414a-986c-db731aca7e71#gt_079478cb-f4c5-4ce5-b72b-2144da5d2ce7" data-linktype="relative-path">little-endian</a> format. The
value of this field MUST be set to one of the values in the following table.</p><dl>
<dd>
<table><thead>
  <tr>
   <th>
   <p>Value</p>
   </th>
   <th>
   <p>Meaning</p>
   </th>
  </tr>
 </thead><tbody><tr>
  <td>
  <p>0x00000002</p>
  </td>
  <td>
  <p>The <b>EncryptedSecret</b>
  and <b>AccessCheck</b> fields MUST be formatted using the version 2 formats
  specified in section <a href="8d60c70b-a14f-4f11-b472-aa044ba4964a" data-linktype="relative-path">2.2.2.1</a>
  and section <a href="a4e292f9-e4c1-4664-b042-3aaf5ffba423" data-linktype="relative-path">2.2.2.3</a>
  respectively.</p>
  </td>
 </tr><tr>
  <td>
  <p>0x00000003</p>
  </td>
  <td>
  <p>The <b>EncryptedSecret</b>
  and <b>AccessCheck</b> fields MUST be formatted using the version 3 formats
  specified in section <a href="628f2667-734b-42a4-9dc2-4678e93b65fe" data-linktype="relative-path">2.2.2.2</a>
  and section <a href="af06c7c3-0bc5-4755-82e7-35fbb7540399" data-linktype="relative-path">2.2.2.4</a>
  respectively.</p>
  </td>
 </tr></tbody></table>
</dd></dl><p><b>cbEncryptedSecret (4 bytes): </b>A 32-bit unsigned
integer. It MUST be the length of the <b>EncryptedSecret</b> field, in bytes.
This field is encoded using little-endian format.</p><p><b>cbAccessCheck (4 bytes): </b>A 32-bit unsigned
integer. It MUST be the length of the <b>AccessCheck</b> field, in bytes. This
field is encoded using little-endian format.</p><p><b>guidKey (16 bytes): </b>A 16-byte <a href="../ms-dtyp/4926e530-816e-41c2-b251-ec5c7aca018a" data-linktype="relative-path"><b>GUID</b></a>
(<a href="../ms-dtyp/cca27429-5689-4a16-b2b4-9325d93e4ba2" data-linktype="relative-path">[MS-DTYP]</a>
section <a href="../ms-dtyp/001eec5a-7f8b-4293-9e21-ca349392db40" data-linktype="relative-path">2.3.4.2</a>)
that is used by the server to uniquely identify this public key.</p><p><b>EncryptedSecret (variable): </b>This field
contains an encrypted version of the secret. Its length MUST be equal to <b>cbEncryptedSecret</b>
bytes. It MUST be populated in accordance with the processing rules specified
in section 3.2.4.1.</p><p><b>AccessCheck (variable): </b>This field contains
information used by the server to determine which clients are permitted to
unwrap the secret. Its length MUST be equal to <b>cbAccessCheck</b> bytes. It
MUST be populated in accordance with the processing rules specified in section
3.2.4.1.</p></div>