<div class="content" name="SetCASecurity" uuid="d029fed1-44ec-4eb8-aeda-4c1b70ebc59c"><p>The SetCASecurity method is used to set the <span><a href="c6451297-197d-4b4b-b786-3f3187b67b8f#gt_c925d5d7-a442-4ba4-9586-5f94ccec847a" data-linktype="relative-path">CA</a></span>
security, as defined in the <span><a href="8cde1de4-9e58-4250-b8fe-4f0da15127ed" data-linktype="relative-path">Abstract Data
Model (section 3.1.1)</a></span>.</p><dl>
<dd>
<div><pre> HRESULT SetCASecurity(
   [in, string, unique] wchar_t const* pwszAuthority,
   [in, ref] CERTTRANSBLOB* pctbSD
 );
</pre></div>
</dd></dl><p><b>pwszAuthority: </b>See the <i>pwszAuthority</i>
definition in section <span><a href="faae1099-4b4f-463c-95b0-5962c9bf400e" data-linktype="relative-path">3.1.4.1.1</a></span>. </p><p><b>pctbSD: </b>A pointer to a <span><a href="a94fb0b1-902f-43ea-9422-f2d24bcb10b6" data-linktype="relative-path">CERTTRANSBLOB</a></span>
data structure that holds the security descriptor. Security descriptors are
specified in <span><a href="../ms-dtyp/cca27429-5689-4a16-b2b4-9325d93e4ba2" data-linktype="relative-path">[MS-DTYP]</a></span>
section <span><a href="../ms-dtyp/7d4dac05-9cef-4563-a058-f108abecce1d" data-linktype="relative-path">2.4.6</a></span>.</p><p>The CA SHOULD use the permissions set in <b>pctbSD</b> to
deny and allow permissions to CA functionality. Microsoft CA permissions are
defined in section <span><a href="509360cf-9797-491e-9dd1-795f63cb1538" data-linktype="relative-path">3.1.1.7</a></span>.</p></div>