RE: Certificate added to the local machine store is implicitly added t

Think about it as "what's available for this user". Both the user's stuff and
the "everybodY" stuff is available.
This is similar how the Start Menu works: If you add a shortcut to "All
Users" the same shortcut will appear to the current user's Start Menu.
So yes, this is by design.

Laszlo Elteto
SafeNet, Inc.

"Innokentiy Ivanov" wrote:

Hello,

Is it possible to import a certificate into the local machine system store,
having it not implicitly imported to the current user one? I open a local
machine store (my own, not of the predefined ones, such as My or Root) with
CertOpenStore(), specifying the CERT_SYSTEM_STORE_LOCAL_MACHINE flag. Then I
import a certificate to it with CertAddEncodedCertificateToStore() call.
However, the certificate becomes available in both local machine and current
user instances of the store.

MMC exposes the same behaviour when importing certificates to the local
machine instance of the store. Is that by design?

With best wishes,
Innokentiy Ivanov



.

Relevant Pages