Re: Message signing fails when used in a driver



Hi again,

Apparently, serializing a certificate using
CertSerializeCertificateStoreElement does not serialize the private
key, it merely includes a reference to the private key container. When
deserializing the certificate when running in another user, the
private key container reference can no longer be resolved.

My question now is: how can I copy the entire certificate, including
the private key?

If, at the moment of installation of a certificate in Windows, 'allow
private key export' is checked, it is perfectly possible to (still in
Windows) export the certificate and install it in another user or on
another machine without losing the private key. Which API functions
does Windows use for this operation?

Regards,
Bert Vingerhoets
.



Relevant Pages

  • RE: SIMple SSL question ??
    ... I believe your book is instructing you to keep the private key secure. ... you use the certificate request wizard in IIS to install the cert after it's ... the certificate that's just been installed. ... If an attacker retrievs the SSL certificate, ...
    (microsoft.public.dotnet.security)
  • RE: SIMple SSL question ??
    ... I believe your book is instructing you to keep the private key secure. ... you use the certificate request wizard in IIS to install the cert after it's ... the certificate that's just been installed. ... If an attacker retrievs the SSL certificate, ...
    (microsoft.public.dotnet.security)
  • Re: Certificates, Keys, Mobile Users, Intended Usage
    ... Option that you think about uses self signed EFS certificates. ... Better then exporting user's private key as backup is to setup DRA (Data ... there is no EFS certificate and it will generate a new one. ... Mobile computer users benefit from encrypting sensitive ...
    (microsoft.public.win2000.security)
  • Re: PFXExportCertStoreEx
    ... which contains the actual PFX and write that to the disk. ... methods to export certificate + private key from the IE store. ...
    (microsoft.public.platformsdk.security)
  • Re: How to programmatically retrieve certificate from system key store
    ... You can do this using P/Invoke and capi functions, or even simpler, ... > requires you to add the required certificate to the ClientCertificates ... > Because a certificate doesn't actually contain a private key, ... > installed in the system key store, ...
    (microsoft.public.dotnet.security)