Re: WSE Requires Private Key in MachineKey Folder?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: D.Mitchell (DMitchell_at_discussions.microsoft.com)
Date: 09/15/04


Date: Wed, 15 Sep 2004 06:45:08 -0700

Use MMC. Add the Certificates snap-in. Select computer account. Then import
the certificate under the Personal folder.

I can pick up the certificates programmatically. I have a problem in that
WSE 2 cannot pick up certificates for decryption or signature verification
when a message is recieved.

"Norm" wrote:

> Sven,
>
> Trying to install certificate (.p12 file) into Personal Store as
> suggested using the Certificate Import Wizard in Win2K but when I try
> to specify a location store, the choices I get are:
> Personal
> -> Registry
> Trusted Root Certificate Authorities
> -> Registry
> -> Local Computer
> Enterprise Trust
> -> Registry
> -> Group Policy
> -> Local Computer
> Intermediate Certificate Authorities
> -> Registry
> -> Group Policy
> -> Local Computer
>
> Which one would be the Personal store of the local computer...or
> should I be using a different import tool?
>
> Norm.
>
>
> "SA" <informatica@freemail.nl> wrote in message news:<#ZDojj2lEHA.3608@TK2MSFTNGP09.phx.gbl>...
> > Try installing the certificate in the Personal store of the local computer.
> >
> > --
> >
> > Sven
> >
> >
> > "Norm" <norml@shaw.ca> wrote in message
> > news:230ca7d1.0409091637.1ab2ea30@posting.google.com...
> > > Hello Readers,
> > >
> > > I'm trying to create a web service client using VS .NET 2003 along
> > > with WSE 2.0 under Win2K Prof. I'm having trouble using a X.509
> > > digital certificate as it seems my app generates a windows exception
> > > when trying to read the private key of the certificate. I believe the
> > > digital certificate is installed on my machine as I can see it in both
> > > mmc and the X509 Certificate Tool that comes with WSE 2.0. Also, both
> > > tools indicate that the certificate contains a private key. In my
> > > app, I'm using the X509Certificate**** classes to retrieve the
> > > certificate and when I step through the code using the debugger and
> > > Watch the contents of the retrieved certificate object, the value of
> > > the Key attribute is:
> > >
> > > <error: an exception of type:
> > > {System.ComponentModel.Wind32Exception} occurred>
> > >
> > > And sure enough if I try to call something like cert.Key, an exception
> > > is thrown.
> > >
> > > Now my desparate search of newsgroups came across several recent
> > > threads that mention WSE expects the private key to be in C:\Documents
> > > and Settings\All
> > > Users\Application Data\Microsoft\Crypto\RSA\MachineKeys. Using the
> > > X509 Certificate tool, I found that the private key file is located in
> > > C:\Documents and Settings\Administrator\Application
> > > Data\Microsoft\Crypto\RSA\S-1-5-21...
> > > The certificate was installed in the Root Store of Local Computer.
> > >
> > > My question is whether WSE does expect the private key file to be in
> > > the MachineKeys directory. If so, how does one manipulate the
> > > installation of the digital certificate to make it go into that
> > > directory?
> > >
> > > Any insight would be appreciated.
> > >
> > > Norm.
>



Relevant Pages

  • Re: MTS Component Problems - HELP!
    ... I kind of understand what you're saying about the personal store. ... import a certificate to the Personal Store to be used by IIS for SSL ... valid NT user with appropriate policy settings. ... > found in the personal store belonging to the identity account. ...
    (microsoft.public.win2000.group_policy)
  • Re: MTS Component Problems - HELP!
    ... I kind of understand what you're saying about the personal store. ... import a certificate to the Personal Store to be used by IIS for SSL ... valid NT user with appropriate policy settings. ... > found in the personal store belonging to the identity account. ...
    (microsoft.public.windows.group_policy)
  • Re: IKE failed to find valid machine certificate (Error 786)
    ... If you go to the Personal store of the certificates in the Local Computer, ... You have a private key that corresponds to this certificate. ... Download a CA certificate - installs the certificate.cer in your trusted ...
    (microsoft.public.win2000.ras_routing)
  • Re: MTS Component Problems - HELP!
    ... Brian. ... > import a certificate to the Personal Store to be used by IIS for SSL ... object that is called from the ASP page, and then calls LoadUserProfile, ...
    (microsoft.public.win2000.group_policy)
  • Re: MTS Component Problems - HELP!
    ... Brian. ... > import a certificate to the Personal Store to be used by IIS for SSL ... object that is called from the ASP page, and then calls LoadUserProfile, ...
    (microsoft.public.windows.group_policy)