---
id: object/codeunit/1259
type: object
title: Codeunit 1259 "Certificate Management"
summary: Codeunit 1259 "Certificate Management" in Base Application (System.Security.Encryption). 20 public procedures. Present since at least BC23, still in BC30, changed in BC24, BC27.
tier: official
language: en
tags:
  - codeunit
  - base application
versions:
  introduced: null
  last_changed: "27"
  deprecated: null
review:
  state: derived
  by: null
  at: null
  flags: []
generated:
  at: "2026-10-11T00:31:51.816Z"
  pipeline: 0.2.0
  prompts: {}
  input_hash: b5d0c95638a9d3406ab5e0be5a163ecdd1286723fed745a6c4d1aa04c6a94aea
evidence:
  - kind: code
    url: https://github.com/microsoft/BCApps/blob/ea08af5ef2d6a9b5c5af4a029288abbe2c883220/src/Layers/W1/BaseApp/System/IsolatedStorage/CertificateManagement.Codeunit.al
    title: src/Layers/W1/BaseApp/System/IsolatedStorage/CertificateManagement.Codeunit.al (releases/29.x)
    date: null
    commit: ea08af5ef2d6a9b5c5af4a029288abbe2c883220
    t: null
    quote: null
links:
  learn: []
  objects: []
  features: []
  topics: []
  localizations: []
  videos: []
  posts: []
  guidelines: []
object_type: codeunit
object_id: 1259
name: Certificate Management
namespace: System.Security.Encryption
app: Base Application
extends: null
first_version: "23"
last_version: "30"
present_in:
  - "23"
  - "24"
  - "25"
  - "26"
  - "27"
  - "28"
  - "29"
  - "30"
changed_in:
  - "24"
  - "27"
source_major: "29"
obsolete: null
countries: []
ms_search_form_ids: []
counts:
  fields: 0
  procedures: 25
  events: 0
  subscribers: 0
relations:
  out: 0
  referenced_by: 0
  pages: 0
  extended_by: 0
  event_subscribers: 0
  calls: 10
  called_by: 2
  implements: 0
---

# Codeunit 1259 "Certificate Management"

> Codeunit 1259 "Certificate Management" in Base Application (System.Security.Encryption). 20 public procedures. Present since at least BC23, still in BC30, changed in BC24, BC27.

Base Application · System.Security.Encryption · BC23-30 · [source at ea08af5e](https://github.com/microsoft/BCApps/blob/ea08af5ef2d6a9b5c5af4a029288abbe2c883220/src/Layers/W1/BaseApp/System/IsolatedStorage/CertificateManagement.Codeunit.al) · facts from BC29

## Procedures

- `UploadAndVerifyCert(var IsolatedCertificate: Record "Isolated Certificate"): Boolean`
- `InitIsolatedCertificateFromBlob(var IsolatedCertificate: Record "Isolated Certificate"; NewTempBlob: Codeunit "Temp Blob"): Boolean`
- `VerifyCert(var IsolatedCertificate: Record "Isolated Certificate"): Boolean`
- `VerifyCertFromString(var IsolatedCertificate: Record "Isolated Certificate"; CertString: Text)`
- `SaveCertToIsolatedStorage(IsolatedCertificate: Record "Isolated Certificate")`
- `SavePasswordToIsolatedStorage(var IsolatedCertificate: Record "Isolated Certificate")`
- `GetPasswordAsSecureString(var DotNet_SecureString: Codeunit DotNet_SecureString; IsolatedCertificate: Record "Isolated Certificate")`
- `GetPasswordAsSecret(IsolatedCertificate: Record "Isolated Certificate"): SecretText`
- `GetCertAsBase64String(IsolatedCertificate: Record "Isolated Certificate"): Text`
- `GetCertDataScope(IsolatedCertificate: Record "Isolated Certificate"): DataScope`
- `DeleteCertAndPasswordFromIsolatedStorage(IsolatedCertificate: Record "Isolated Certificate")`
- `GetUploadedCertFileName(): Text`
- `SetCertPassword(CertificatePassword: SecretText)`
- `ReadCertFromStream(Password: SecretText; var InStr: InStream)`
- `ValidateCertFields(var IsolatedCertificate: Record "Isolated Certificate")`
- `GetRawCertDataAsBase64String(IsolatedCertificate: Record "Isolated Certificate"): Text`
- `VerifyCertFromBase64(Base64String: Text): Boolean`
- `GetCertSimpleName(IsolatedCertificate: Record "Isolated Certificate"): Text`
- `GetCertPrivateKey(IsolatedCertificate: Record "Isolated Certificate"; var SignatureKey: Codeunit "Signature Key")`
- `GetPublicKeyAsBase64String(FullCertificateBase64: Text; Password: SecretText): Text`

Plus 5 local procedures.

## Triggers

OnRun

## Calls

From the extracted call graph of BC29 (graphify-al on the snapshot checkout): calls whose target is known from a declared type or an `Object::"Name"` argument. Interface dispatch and calls through events are not counted, so the list is not complete.

- [Codeunit 3043 "DotNet_X509Certificate2"](../codeunit/3043.md) (13 calls: `ConvertCertToDotNetFromBase64 → X509Certificate2`, `GetCertPrivateKey → PrivateKey`, `GetCertSimpleName → GetX509Certificate2`, …)
- [Codeunit 4100 "Temp Blob"](../codeunit/4100.md) (5 calls: `ReadCertFromBlob → CreateInStream`, `SaveCertToIsolatedStorage → CreateInStream`, `SaveCertToIsolatedStorage → HasValue`, …)
- [Codeunit 4110 "Base64 Convert"](../codeunit/4110.md) (4 calls: `ReadCertFromBlob → ToBase64`, `ReadCertFromStream → ToBase64`, `SaveCertToIsolatedStorage → ToBase64`, …)
- [Codeunit 3000 "DotNet_Array"](../codeunit/3000.md) (3 calls: `ConvertCertToDotNetFromBase64 → SetArray`, `ReadCertFromBlob → SetArray`, `ReadCertFromStream → SetArray`)
- [Codeunit 3041 "DotNet_X509KeyStorageFlags"](../codeunit/3041.md) (3 calls: `ConvertCertToDotNetFromBase64 → Exportable`, `ReadCertFromBlob → Exportable`, `ReadCertFromStream → Exportable`)
- [Codeunit 419 "File Management"](../codeunit/419.md) (2 calls: `UploadAndVerifyCert → BLOBImportWithFilter`, `UploadAndVerifyCert → GetFileName`)
- [Codeunit 1266 "Cryptography Management"](../codeunit/1266.md) (1 call: `SavePasswordToIsolatedStorage → IsEncryptionEnabled`)
- [Codeunit 1474 "Signature Key"](../codeunit/1474.md) (1 call: `GetCertPrivateKey → FromXmlString`)
- [Codeunit 3058 "DotNet_AsymmetricAlgorithm"](../codeunit/3058.md) (1 call: `GetCertPrivateKey → ToXmlString`)
- [Codeunit 3750 "DotNetHelper_SecureString"](../codeunit/3750.md) (1 call: `GetPasswordAsSecureString → SecureStringFromString`)

## Called by

- [Page 1263 "Certificate"](../page/1263.md) (6 calls: `HandleExpiredCert → GetUploadedCertFileName`, `OnOpenPage → UploadAndVerifyCert`, `SaveCertToIsolatedStorage → DeleteCertAndPasswordFromIsolatedStorage`, …)
- [Table 1262 "Isolated Certificate"](../table/1262.md) (2 calls: `ExistsInIsolatedStorage → GetCertDataScope`, `OnDelete → DeleteCertAndPasswordFromIsolatedStorage`)

## Across versions

- Present in: BC23-30
- Changed (declaration) in: BC24, BC27

Source: AL metadata extracted from the code (names, ids, signatures, properties); no code bodies (D10).

## Ask your agent

Procedure bodies are not stored here (D10). The call sections above are our own, per object, from the BC29 call graph. For a procedure body or the calls of one procedure, ask bc-code-atlas (external, by Stefan Maron, MIT; default corpus w1-28), which the bc-observatory plugin connects: `bcatlas_resolve_node(object_type: "codeunit", object_name: "Certificate Management")`, then `bcatlas_get_procedure_body` or `bcatlas_get_neighbors` on the returned id.