Re: Changing private key protection to strong

From: Ryan Menezes [MSFT] (ryanmen_at_online.microsoft.com)
Date: 10/13/04

  • Next message: Pavel Lebedinsky: "Re: OpenProcess fails with Access Denied on Win2003" 
    Date: Tue, 12 Oct 2004 15:44:20 -0700

    If I understand you correct, are you asking if its possible to change the
    protection level of an existing private key on disk? The answer to that is:
    No, its not possible. 

    -- 
Thanks,
Ryan Menezes [MS]
This posting is provided "AS IS" with no warranties, and confers no rights.
"Larry" <Larry@discussions.microsoft.com> wrote in message
news:6D911EFC-EFC5-4E3F-A43E-5D27A4280605@microsoft.com...
> I have certificates in a system store that don't have strong private key
> protection.  I need to programmatically change this (so that the message
box
> is always displayed, prompting the user for the password).  I figured that
I
> would us DPAPI (CryptProtectData) to accomplish this.  A couple of
questions
> that I have now is:
> 1)  Is this the correct way to do this?
> 2)  What do I pass CryptProtectData as the first parameter - DATA_BLOB
(the
> certificate or private key or something else)
> 3)  If what I am passing in is the private key, how (which function call)
do
> I use to get it?
>
> Thanks for your help!
>
> Larry
  • Next message: Pavel Lebedinsky: "Re: OpenProcess fails with Access Denied on Win2003"

    Relevant Pages

    • Changing private key protection to strong
      ... I have certificates in a system store that don't have strong private key ... I need to programmatically change this (so that the message box ... What do I pass CryptProtectData as the first parameter - DATA_BLOB (the ...
      (microsoft.public.platformsdk.security)
    • Re: EFS multiple certificates associated with single user
      ... CertA/CertB because those keys are encrypted with previous passwords. ... > three certificates in the personal store, CertA, CertB and CertC. ... > certificates> tasks> export private key. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: I have installed my digital certificate,but where is my public key?
      ... If I anyone stole my private key, is the backup of private key useful? ... > I posted to you once how to secure your privacy, ... Personally I have certificates for such purposes (on-line ... stored on smart card. ...
      (microsoft.public.security)
    • Re: CertEnumCertificatesInStore() and IE
      ... Removing the certificate without the corresponding private key is NOT a ... Persons may wish to delete certificates without deleting the corresponding ... it makes sense to allow to remove a certificate without removing the private ... >> checkbox in "Export File Format" ...
      (microsoft.public.platformsdk.security)
    • Re: signing a hash thats been created outside Crypto-API
      ... CryptAcquireCertificatePrivateKey() ... This automatically manages acquiring access to the private key contained ... The certificates are public and are NOT stored in key containers. ...
      (microsoft.public.platformsdk.security)
    • Quantcast