Re: XEnroll and local machine's cert store

From: Kelvin Yiu [MS] (kelviny_at_online.microsoft.com)
Date: 11/16/04


Date: Tue, 16 Nov 2004 14:20:07 -0800

You can set the MyStoreFlags and CAStoreFlags (if you have intermediate CA
certs) properties on xenroll to CERT_SYSTEM_STORE_LOCAL_MACHINE.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/seccrypto/security/ienroll4_mystoreflags.asp
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/seccrypto/security/ienroll4_castoreflags.asp

Note that the user must be a local admin for this operation to succeed.

-- 
Kelvin Yiu [MS]
This posting is provided "AS IS" with no warranties, and confers no rights
"cyberninja" <cyberninja@discussions.microsoft.com> wrote in message 
news:807B1270-08C4-4DE7-9434-AB2DC5EFD9A9@microsoft.com...
> XEnroll installs certificate to a cert store of the current user. Is it
> possible to install cert to the local machine's store via XEnroll? 


Relevant Pages

  • Re: Certificate-Problem
    ... As local Admin or Domain Admin it works also on the WTS. ... When the user tries to install the certificate he receives the ... The same errormessage occurs when trying to install the cert. ...
    (microsoft.public.windows.terminal_services)
  • Re: Writing SCP
    ... function, like CryptDllEncodePublicKeyAndParameters. ... XENROLL can't create PKCS#10 query for cert. ...
    (microsoft.public.platformsdk.security)