Re: Install certificate in personnal store

From: Michel Gallant \(MVP\) (neutron_at_istar.ca)
Date: 05/28/03 

Date: Wed, 28 May 2003 10:13:28 -0400

The certificates as viewed from IE certs panel does some filtering
on what certs are visible.
For example, i believe if you import into the MY (Personal) cert store,
the certificate will only be visible if you have the associated private
key on your system (that is really what the MY store is intended for).
If you import certs without a private key, it is best to put them into
the AddressBook ("Other") store if they are user certs (not root CA certs).

The fact that IE certs views DOES filter certificates shown does not
seem to be well documented anywhere.

You can view ALL certs and ALL system certificate stores using
the Certificates Console snapin (Win2000+).

 - Michel Gallant
    MVP Security

"Cranky" <crankykong21@hotmail.com> wrote in message
news:3ed4a46c$0$11123$ba620e4c@reader0.news.skynet.be...
> Hello,
> I use the enrollment station to request a certificate (for smartcard logon).
> I choose the template SmarcardUser so I can also use my certificate to sign
> email with Outlook.
>
> After the enrollment, I have a RSA key pair and the certificate on my smart
> card.
> With PKCS #11 I can read the value of the certificate object and then create
> a *.cer file with this value.
>
> So I have exported my certificate from the smart card to a *.cer
>
> Now, I would like to install this certificate (*.cer) in the personnal store
> of my computer.
> So I double click on the *.cer -> Install Certificate.
> In the wizard to install the certificate, if the wizard choose automatically
> the store, the certificate is placed in the store intermediaray authority
> and not in the personnal store. (I can see that with IE).
>
> If I choose myself the store, when I choose "Personnal store" and then I
> press Finish to install the certificate.
>
> Then I have a message that say me that the importation was successfull but
> when I use IE to see the list of certificate in the personnal store, I can
> not see the certificate that I just come to install.
>
> And another problem but I think they are linked, when I double click on the
> *cer file, normally if I have the private key corresponding to the
> certificate, I think I must have a message "You have a private key
> corresponding to the certificate".
> But here I don't have this message.
>
> And then when I try to use this certificate in Outlook to sign a message, I
> have an error when the message is sended ... "An error has occured"
>
> So why isn't my certificate installed in the personnal store ?
>
> Thanks a lot for your help
>
>

Relevant Pages

  • Re: Unable to unwrap a symmetric key using the private key of an X.509
    ... The problem is related to the certificate store on the web service side. ... You installed the certificate in "OtherPeople" store but the policy points ... You should install the certificate in the "Personal" store. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: ActiveSync 4.0 with Exchange 2003 SP2 (Problems setting up sma
    ... Seems like all this is done using "private certs". ... If I buy a cert from ie Verisign, should I need to install CA on the device? ... regards KjetilP ... Lots of grief getting the Certificate ...
    (microsoft.public.exchange.clients)
  • Re: Programmatically installing Client Root Certificates
    ... You install root certificates into the "root" store. ... the certificate to the root store. ...
    (microsoft.public.platformsdk.security)
  • Re: RPC over HTTP 1st time w/ Vista - Trouble installing Certificate
    ... And do NOT select automatic store - you need to put it in the Root store. ... The reason is that the elevated user is not the same as the regular user, and the default is to put it in the user's store. ... From waht i can tell everything is setup correctly, but the only thing that isn't going as planned is the installation of the certificate. ... Normally I have the user go to the mail.mycompany.com/exchange and install the certificate at the warning that pops up. ...
    (microsoft.public.windows.server.sbs)
  • Importing a PFX file using X509Certificate2 from ASP fails
    ... An administrator on the machine where the ASP.NET/COM+ application runs should install the certificate in the machine certificate store, ... The ASP.NET/COM+ application code should use the installed certificate rather than attempt to install one from a PFX file. ...
    (microsoft.public.dotnet.security)