Microsoft® Windows® 2000 Security Handbook

Programmatic Implementation of COM+ Security Features

Now that you have mastered the administration of COM+ security, the time has drawn nigh to discuss the interfaces and methods available to a COM+ developer. The first method I discuss is CoInitializeSecurity.

Initialization of the Security

Both the client and server must initialize the security before communicating with each other. Initialization means choosing the security package, setting the authentication information, a so-called security blanket, and negotiating these settings to choose settings that satisfy both parties.

The process of initialization works through the SSPI, so the steps are similar in RPC and COM. However, these frameworks use different, incompatible initialization functions, ...