Hans Leidekker (@hans) commented about dlls/crypt32/pfx.c:
SetLastError( ERROR_INVALID_PARAMETER ); return NULL; }
- if (flags & ~(CRYPT_EXPORTABLE|CRYPT_USER_KEYSET|CRYPT_MACHINE_KEYSET|PKCS12_NO_PERSIST_KEY))
 
- if (flags & ~(CRYPT_EXPORTABLE|CRYPT_USER_KEYSET|CRYPT_MACHINE_KEYSET|PKCS12_NO_PERSIST_KEY|PKCS12_ALWAYS_CNG_KSP)) { FIXME( "flags %08lx not supported\n", flags ); return NULL; }
 - if (flags & PKCS12_ALWAYS_CNG_KSP)
 - {
 WARN( "flag PKCS12_ALWAYS_CNG_KSP ignored\n" );- }
 
That should be a FIXME.