Re: CA key pair deposition
From: paul (paul@rettersen.de)
Date: 08/30/02
- Next message: John Krueger: "Grant access to web server but block access to domain: HOW?"
- Previous message: Medusa: "Problems with Service Pack 3"
- In reply to: D. Cross [MS]: "Re: CA key pair deposition"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "paul" <paul@rettersen.de> Date: Fri, 30 Aug 2002 05:45:20 -0700
Hi David,
thanks for your posting.
I will check the C:\Doc... directory on Monday, but there
may be only the Certificate ... the CA-Certificate is in
the "Root" Directory of the C - HardDisk.
But I´m looking for the Public and Private Key of the CA !
Do you know which regKey (if it is one) may it be ?
thanks a lot
best regards
-paul
>-----Original Message-----
>example: C:\Documents and Settings\dcross\Application
>Data\Microsoft\SystemCertificates\My
>
>
>--
>
>David B. Cross [MS]
>
>--
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>
>"paul" <paul@rettersen.de> wrote in message
>news:bcb801c24f78$9d4cc880$9ae62ecf@tkmsftngxa02...
>Hi,
>
>thanks a lot for your postings and the link about DPAPI.
>But which regKeys, are the private and public key ? okay,
>they are protected by DPAPI - but is there any
>encrypted "thing" in the registry ? and where :)
>
>thanks
>-paul
>
>>-----Original Message-----
>>The CA runs as the SYSTEM account which implies that the
>keys are stored in
>>the machine store of the local system. You can use a HSM
>of course with a
>>third party CSP to store the keys elsewhere of couse.
>>
>>keys are protected by DPAPI and are generated using
>CryptGenRandom
>>
>>http://msdn.microsoft.com/library/default.asp?
>url=/library/en-us/dnsecure/ht
>>ml/windataprotection-dpapi.asp
>>
>>--
>>
>>David B. Cross [MS]
>>
>>--
>>This posting is provided "AS IS" with no warranties, and
>confers no rights.
>>
>>"paul" <paul@rettersen.de> wrote in message
>>news:94ee01c24e84$9c1d7120$35ef2ecf@TKMSFTNGXA11...
>>hi,
>>
>>i´m trying to make a PKI with .NET RC1. I need it for a
>>VPN-Solution (L2TP/IPSec).
>>After the installation of an enterprise CA I´m trying to
>>find out where the key pair (private and public key of
>>the CA), which the "wizzard" generated, could be.
>>
>>Is there any whitepaper, which descibes how the wizzard
>>generates keys (random, etc.) and where the keys are ?
>>
>>thanks a lot
>>best regards
>>-paul
>>
>>
>>.
>>
>
>
>.
>
- Next message: John Krueger: "Grant access to web server but block access to domain: HOW?"
- Previous message: Medusa: "Problems with Service Pack 3"
- In reply to: D. Cross [MS]: "Re: CA key pair deposition"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
