Re: Does anyone back up Certificates?
- From: Sylvain <noSpam@xxxxxxxx>
- Date: Tue, 10 Jul 2007 20:56:20 +0200
lelteto wrote on 10/07/2007 17:54:
I assume that the USB token contains the private key - and (unless the token physically damaged) you don't and can't back up the private key.
why are you assuming that ?
On the other hand I am certain that you can back up the certificate. The
or extract it from any signature generated with the associated key.
I can't figure out how it is possible to loose a cert - only the backup of the private key could be an issue.
question is if the token is CAPI or Cryptoki. If it's CAPI, I am almost certain that the certificate is installed into one of the normal Windows certificate stores.
in the CA provided application does not allow the selection of the CSP (and thus device) responsible of the key/cert, it's just a silly appl.
Find the cert from GeoTrust (which probably says something about code signing) and click on Export. Leave the "do not export the private key"
the PO said "key is not exportable" (marked as not exportable) ...
If your token is Cryptoki (aka. PKCS#11), you would need to find out where the certificate is stored (maybe in a file in their application's directory?) Or just ask them, explaining that you just want to back up the CERTIFICATE.
do you it this way ??
what about:
CK_ATTRIBUTE_TYPE type = CKO_CERTIFICATE;
CK_ATTRIBUTE attrType = { CK_OBJECT_CLASS, &type, 4);
C_FindObjectsInit(session, &attrType, 1);
CK_OBJECT_HANDLE cert;
C_FindObjects(session, &cert, 1, &count);
CK_ATTRIBUTE derCert = { CKA_VALUE, buffer, size);
C_GetAttributeValue(session, cert, &derCert, 1);
well, according PO the cert is in a MS cert-store anyway.
Sylvain.
.
- Follow-Ups:
- Re: Does anyone back up Certificates?
- From: lelteto
- Re: Does anyone back up Certificates?
- References:
- Re: Does anyone back up Certificates?
- From: Sylvain
- Re: Does anyone back up Certificates?
- Prev by Date: How to access share using specific credentials?
- Next by Date: Re: Vista vs Monster Legacy App - [Desparately] Seeking Suggestions
- Previous by thread: Re: Does anyone back up Certificates?
- Next by thread: Re: Does anyone back up Certificates?
- Index(es):
Relevant Pages
|
|
