The ability to add a certificate to a store.

For security reasons, this ability should be granted only to highly trusted code.

The ability to create a new store.

New stores are created by calling the Open method.

The ability to delete a store.

This functionality is not exposed by the X509Store class.

The ability to enumerate the certificates in a store.

For privacy reasons, this ability should be granted only to fully trusted code.

The ability to enumerate the stores on a computer.

This functionality is not exposed by the X509Store class.

The ability to open a store.

The ability to open a store does not include the ability to enumerate certificates (which raises privacy concerns) or to add or remove certificates (which raises security concerns).

The ability to remove a certificate from a store.

This ability should be granted only to highly trusted code because removing a certificate can result in a denial of service.