Re: CertAddEnhancedKeyUsageIdentifier access denied

From: Krish Shenoy[MSFT] (kshenoy_at_online.microsoft.com)
Date: 01/19/04


Date: Mon, 19 Jan 2004 13:26:47 -0800

Can you paste the code you are calling?
Is the EKU that you are using
szOID_PKIX_KP_CODE_SIGNING
"John Maurer" <maurer_john@web.de> wrote in message
news:7146b0f.0401190818.64ec310e@posting.google.com...
> Hi All,
>
> I would like to set the "code signing" extension of Enhanced key usage
> property for an exisiting trusted Root CA on a W2K machine.
> However, when I start my program the call of
> CertAddEnhancedKeyUsageIdentifier API fails and GetLastError gives
> 80070005 (access denied).
> I have an administrator account and I can set the extension manually
> from the certificate mmc-snapin.
>
> Can anyone help please? Thanks.


Quantcast