Re: Certificate Installation Question

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: CG (cg_at_cg.com)
Date: 11/03/04 

Date: Wed, 3 Nov 2004 08:25:38 -0500

I can do that - no problem.

However, for my users, is there a way I can automate this so that it goes to
the correct store? Is there a command line utility that I can import this
cert to? And if there is, what are the commands to make that happen?

We are going to try to package a config so our users can run it and not have
to interact with it.

Thanks Sam.

"Sam Salhi [MSFT]" <samers@online.microsoft.com> wrote in message
news:eGZgeBTwEHA.3084@TK2MSFTNGP10.phx.gbl...
> When you import the certificate, just click "View physical store" and
> expand trusted root certificate authority and select machine store
>
>
> --
> =============================================
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> =============================================
>
> "CG" <cg@cg.com> wrote in message
> news:%23fSk9LRwEHA.3768@TK2MSFTNGP10.phx.gbl...
>>I am using the Certificate Services webpage for my users to sign up and
>> download their certs (we aren't running AD). The Client Authentication
>> cert
>> gets installed in the Local Computer store right where it is supposed to
>> be.
>> When they download the CA certification path it is installed ONLY in the
>> Current User store. This is the case whether they click the "Install this
>> CA
>> certification path" link or if they click the "Download CA certification
>> path" and import with the wizard. If they have the Wizard automatically
>> decide to put the cert where it is supposed to go it always installs it
>> in
>> the Current User store. When I try to authenticate with the Client
>> Authentication cert in the local store and the CA in the Current User I
>> get
>> an error 786. I export the CA from the Current User store and import it
>> into
>> the Local Computer into Trusted CA and everything works fine.
>>
>> My question is- is there anyway to have the Trusted CA to into the Local
>> Computer store? Is this configurable on the CA server somewhere?
>>
>> With the CMAK - is it possible to build a config that includes the certs
>> and
>> will put them into the Local Computer store?
>>
>>
>>
>
>

Relevant Pages

  • Re: Accessing certificate store from ASP.NET web project
    ... the cert must be in the local computer/personal) store - it will then open ... Have a look at the source code to open the right cert store... ... One of the locations requires a x509 certificate in order ... different user context than my vb.net web project. ...
    (microsoft.public.dotnet.security)
  • Re: Need advice: Storing EFS, S/MIME, VPN certs on USB token
    ... into the OS's secure store. ... > your encrypted files on the same device as the encrypted files. ... > Granted, it is protected by the master key encrypting the cert store, ... > So I turn to USB devices. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: PEAP error message with CA and IAS
    ... drop from the personal store to the local machine ... I'll try exporting the cert now.... ... >> The certificate appears to be in the Local Computer ... >> Of the 10 stores in each of Local Computer and Current ...
    (microsoft.public.internet.radius)
  • Re: Exporting/ importing certificates
    ... Sorry - I guess I didn't see "import successful" in the earlier thread. ... I wonder if somehow there's already a copy of the cert in the store that's ... >>Likewise if I run install cert ...
    (microsoft.public.security)
  • Re: ADAM wirh SSL
    ... The cert is in both the local machine personal store and trust roots store, ... Unfortunately, I have 174 files in my machinekeys directory, so I'm not ... I'd like to be able to find the root cause instead of giving ...
    (microsoft.public.windows.server.active_directory)