Re: Cert Stores

From: Craig (anonymous_at_discussions.microsoft.com)
Date: 10/16/04

  • Next message: Joe Richards [MVP]: "Re: Checking "Reset Password" Extended Attribute in AD" 
    Date: Sat, 16 Oct 2004 07:27:47 -0700

    Great - thanks for that. It clears it up for me.

    Craig.

    >-----Original Message-----
    >The names you see in the mmc snapin are "friendly names"
    for the store. Here
    >is system name to friendly name mapping:
    >
    >ROOT - Trusted Root Certification Authorities
    >MY - Personal
    >CA - Intermediate Certification Authorities
    >trust - Enterprise Trust
    >TrustedPeople - Trusted People
    >TrustedPublisher - TrustedPublisher
    >Disallowed - Untrusted Certificates
    >AddressBook - Other People
    >
    >By convention, you should use the "Other People" store for
    other people's
    >certs. However, this store is mainly used by Outlook /
    Outlook Express and
    >may not be created by default but you can create it
    yourself using
    >CertOpenStore.
    >
    >--
    >Kelvin Yiu [MS]
    >This posting is provided "AS IS" with no warranties, and
    confers no rights
    >
    >"Craig" <anonymous@discussions.microsoft.com> wrote in
    message
    >news:3d7d01c4affd$89ea0ae0$a401280a@phx.gbl...
    >>I am using Win2K at the moment, but will also be using
    >> Windows XP.
    >>
    >> Are there any pre-defined stores for placing other
    >> people's certs?
    >>
    >> Thanks,
    >> Craig.
    >>
    >>
    >>>-----Original Message-----
    >>>What version of Windows are you using?
    >>>In general Personal is same as My.
    >>>
    >>>--
    >>>Thanks,
    >>>Anand Abhyankar [MS]
    >>>
    >>>----
    >>>This posting is provided "AS IS" with no warranties, and
    >> confers no rights.
    >>>
    >>>
    >>>"Craig" <anonymous@discussions.microsoft.com> wrote in
    >> message
    >>>news:27ab01c4af6f$690dcfc0$a301280a@phx.gbl...
    >>>> Hi,
    >>>>
    >>>> I am confused as to what stores are predefined. I have
    >>>> read that there are the MY, ROOT, TRUST and CA stores. I
    >>>> have also read that the "Other People" or "ADDRESSBOOK"
    >>>> store is where the certs of people you communicate with
    >>>> should be stored. Yet when I view the certificates snap-
    >> in
    >>>> in mmc, I see none of the above (there is Personal,
    >>>> Trusted Root CA, Trusted People, etc). Are some of these
    >>>> stores I see in mmc, aliases for the MY, ROOT, TRUST and
    >>>> CA stores? What pre-defined stores are available?
    >>>>
    >>>> TIA,
    >>>> Craig.
    >>>>
    >>>
    >>>
    >>>.
    >>>
    >
    >
    >.
    >

  • Next message: Joe Richards [MVP]: "Re: Checking "Reset Password" Extended Attribute in AD"

    Relevant Pages

    • Re: Add cert to trusted publisher store
      ... CertMgr from IE does not display the "TrustedPublisher" store. ... In Win2K, only subset of the ...
      (microsoft.public.platformsdk.security)
    • Re: certmgr - certificate store
      ... Sascha ... > Root = Trusted Root ... > TrustedPublisher = Trusted Publishers ... >> but how to store that certificate to ...
      (microsoft.public.platformsdk.security)
    • Re: certmgr - certificate store
      ... Root = Trusted Root ... TrustedPublisher = Trusted Publishers ... certmgr -add mycert.cer -s My stores the certificate to ...
      (microsoft.public.platformsdk.security)