From 747df88caa02a7a80734b33bd6407235ec381107 Mon Sep 17 00:00:00 2001
From: Kevin Jones <kevin@vcsjones.com>
Date: Tue, 3 Sep 2024 18:47:01 -0400
Subject: [PATCH] Add documentation for VBS in CngKeyCreationOptions

Co-authored-by: Jeremy Barton <jbarton@microsoft.com>
---
 .../Security/Cryptography/CngKeyCreationOptions.cs  | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/src/libraries/System.Security.Cryptography/src/System/Security/Cryptography/CngKeyCreationOptions.cs b/src/libraries/System.Security.Cryptography/src/System/Security/Cryptography/CngKeyCreationOptions.cs
index f3f3e7fb42321..9a7155b09022a 100644
--- a/src/libraries/System.Security.Cryptography/src/System/Security/Cryptography/CngKeyCreationOptions.cs
+++ b/src/libraries/System.Security.Cryptography/src/System/Security/Cryptography/CngKeyCreationOptions.cs
@@ -15,8 +15,21 @@ public enum CngKeyCreationOptions : int
         None = 0x00000000,
         MachineKey = 0x00000020,            // NCRYPT_MACHINE_KEY_FLAG
         OverwriteExistingKey = 0x00000080,  // NCRYPT_OVERWRITE_KEY_FLAG
+
+        /// <summary>
+        /// Indicates a key should be protected with Virtualization-based security (VBS).
+        /// </summary>
         PreferVbs = 0x00010000,             // NCRYPT_PREFER_VBS_FLAG
+
+        /// <summary>
+        /// Indicates a key must be protected with Virtualization-based security (VBS).
+        /// </summary>
         RequireVbs = 0x00020000,            // NCRYPT_REQUIRE_VBS_FLAG
+
+        /// <summary>
+        /// Instructs Virtualization-based security (VBS) to protect the client key with a per-boot key
+        /// when combined with <see cref="RequireVbs"/> or <see cref="PreferVbs"/> .
+        /// </summary>
         UsePerBootKey = 0x00040000,         // NCRYPT_USE_PER_BOOT_KEY_FLAG
     }
 }