Re: where is client certificate on server usually installed?



Typically, I've seen it installed in the machine store, or the store for the
service account. I think the store for the service account is prefered.

Make sure the process account has permissions on the private key files.
That's where most of the chaos usually comes from when this stuff doesn't
work.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
<pg.gupta@xxxxxxxxx> wrote in message
news:1156768118.609568.27030@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hello,

I need to write a service and a configuration program for windows 2000
and windows 2003 servers that can use a digital certificate for client
authentication (for https transactions). In desktop environment, I
would expect the end-user to have installed the client certificate in
the personal store (or user's My certificate store).

In which certificate store do the server administrators typically
install the client certificates? Is it in the Administrator account's
personal certificate store? Would an import functionality to install
the certificate in the machine's personal store be useful?

Can anybody please comment.

Regards.



.



Relevant Pages

  • Re: Unable to unwrap a symmetric key using the private key of an X.509
    ... The problem is related to the certificate store on the web service side. ... You installed the certificate in "OtherPeople" store but the policy points ... You should install the certificate in the "Personal" store. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: Automating Installation of Certificates for ADAM
    ... Normally, this is a good place to ask ADAM questions, but given that your ... We use a dedicated domain service account for ADAM. ... able to create a certificate request and install the certificate into the ... Local Computer Store using certreq, and export a pfx file using a VBScript ...
    (microsoft.public.windows.server.active_directory)
  • Re: Programmatically installing Client Root Certificates
    ... You install root certificates into the "root" store. ... the certificate to the root store. ...
    (microsoft.public.platformsdk.security)
  • Re: RPC over HTTP 1st time w/ Vista - Trouble installing Certificate
    ... And do NOT select automatic store - you need to put it in the Root store. ... The reason is that the elevated user is not the same as the regular user, and the default is to put it in the user's store. ... From waht i can tell everything is setup correctly, but the only thing that isn't going as planned is the installation of the certificate. ... Normally I have the user go to the mail.mycompany.com/exchange and install the certificate at the warning that pops up. ...
    (microsoft.public.windows.server.sbs)
  • Importing a PFX file using X509Certificate2 from ASP fails
    ... An administrator on the machine where the ASP.NET/COM+ application runs should install the certificate in the machine certificate store, ... The ASP.NET/COM+ application code should use the installed certificate rather than attempt to install one from a PFX file. ...
    (microsoft.public.dotnet.security)