Re: Installing Certificates on XP clients

"Paco" <Paco@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:96D84D30-6400-47AE-BE22-B82F879C55B3@xxxxxxxxxxxxxxxx
No one has any idea?

Best regards
Paco


The following was quoted from:
http://www.experts-exchange.com/Software/Internet_Email/Web_Browsers/Internet_Explorer/Q_24127113.html

"You can deploy root certificates via GPO, but anything else would have to
be done via script - you could make a logon script install it I suppose but
that's about as close as you're going to come. Usually a PFX file will have
a password associated, so scripting usually isn't a great option due to
that. Having a PFX without a password isn't secure and pretty much negates
the security of the certificate. Either deskside support or some sort of
remote assistance program would typically be appropriate in this case.

Windows 2003 and 2008 are no different."

You can also try using CAPICOM. I believe you can create a cstore.vbs
script to import the certificate with this utility, however I've never tried
it.

Introducing CAPICOM
http://msdn.microsoft.com/en-us/library/ms995332.aspx

Platform SDK Redistributable: CAPICOM
http://www.microsoft.com/downloads/details.aspx?FamilyID=860EE43A-A843-462F-ABB5-FF88EA5896F6&displaylang=en


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCTS 2008, MCTS Exchange, MCSE, MCSA 2003 & 2000, MCSA
Messaging
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.


.

Relevant Pages

  • Re: how to bypass a known-bad SSL certificate
    ... Is this script just for running on one machine that you control? ... might be able to just disable certificate checking in IE Advanced Options. ... > this warning for a specific certificate and/or webserver? ... Set objHTTP = WScript.CreateObject ...
    (microsoft.public.scripting.vbscript)
  • Re: how to bypass a known-bad SSL certificate
    ... Is this script just for running on one machine that you control? ... might be able to just disable certificate checking in IE Advanced Options. ... > this warning for a specific certificate and/or webserver? ... Set objHTTP = WScript.CreateObject ...
    (microsoft.public.scripting.wsh)
  • RE: How to enable certificate purpose programmatically?
    ... ' This script removes sets the "meta eku" on a particular certificate. ... Set Store = CreateObject ... Set ExtendedProperty = CreateObject ...
    (microsoft.public.platformsdk.security)
  • Re: SSL/TLS - am I doing it right?
    ... Signing a certificate request is easier: ... Why do people feel the need to wrap that up in some Perl script? ... you were using OpenSSL or M2Crypto in a way that takes care of that. ... The problem with the world is stupidity. ...
    (comp.lang.python)
  • Re: Newbie: Getting my head around Certificates
    ... and does not ship with Windows. ... CAPICOM as part of your application. ... To retrieve the server SSL certificate used by IE, ... > .Display() method of the ICertificate2 interface. ...
    (microsoft.public.platformsdk.security)
Loading