Re: Cert for use with CAPICOM signing and backup the private key

From: Ryan D Johnson [MS] (rjohnson_at_online.microsoft.com)
Date: 01/08/04 

Date: 08 Jan 2004 11:14:27 -0800

"SB Fong" <s.b.fong@oocl.com> writes:

> The makecert util only allowed either to save the private
> key in the CSP or the key file (with symmetric encyption),
> but not both.

Store the key in the CSP and use the -pe option on makecert to mark
the private key exportable. Then you can use the cert ui to export
the cert and its private key to a pfx file. 

-- 
Ryan D Johnson [MS]
rjohnson@online.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights.  Use of included script samples are subject to the terms
specified at http://www.microsoft.com/info/cpyright.htm

Relevant Pages

  • Re: A question about CryptAcquireCertificatePrivateKey
    ... Windows stores the CSP and private key associated with the certificate in the ... This is, of course, true only when WINDOWS stores the cert. ...
    (microsoft.public.platformsdk.security)
  • Re: Alternative store vs. MY store
    ... store both the client cert and its associate private key on my USB memory ... your codes (CSP, ... indirect call to your CSP when one of your cert is involved in an operation. ...
    (microsoft.public.platformsdk.security)
  • Re: Alternative store vs. MY store
    ... >> keep the private key on the memory card all the time. ... > must so start to copy your certs to the store, ... > indirect call to your CSP when one of your cert is involved in an operation. ...
    (microsoft.public.platformsdk.security)
  • Re: Linking Private Key File and Digital Certificate
    ... You would have to write a CSP for CAPI to ... > with out importing the private key into the registry. ... > private key file without importing the private key blob to ...
    (microsoft.public.security)
  • Cert for use with CAPICOM signing and backup the private key
    ... Anyone know how to create a cert than can be used by ... CAPICOM to do signing, while able to save the private key ... file into the CSP, and associate it with the Cert. ...
    (microsoft.public.platformsdk.security)
Quantcast