Re: where is client certificate on server usually installed?



In article <1156768118.609568.27030@xxxxxxxxxxxxxxxxxxxxxxxxxxx>,
pg.gupta@xxxxxxxxx says...
Hello,

I need to write a service and a configuration program for windows 2000
and windows 2003 servers that can use a digital certificate for client
authentication (for https transactions). In desktop environment, I
would expect the end-user to have installed the client certificate in
the personal store (or user's My certificate store).

In which certificate store do the server administrators typically
install the client certificates? Is it in the Administrator account's
personal certificate store? Would an import functionality to install
the certificate in the machine's personal store be useful?

Can anybody please comment.

Regards.


It all depends on how you implement the service. I have seen
certificates installed both a machine account certificates (requiring a
local administrator to install the service to allow access) or
implemented with a specific service account and the certificate
installed in the profile of the service account.

As stated in another response, wherever you place the certificate and
private key, an account will reqire access to the key material

Brian
.



Relevant Pages

  • Re: Windows Update repeats
    ... You cannot install some updates or programs ... to a Windows component, install a service pack for Windows or for a Windows ... The Microsoft digital signature affirms that software has been tested with ... Publishers certificate store. ...
    (microsoft.public.windowsupdate)
  • Re: Unable to unwrap a symmetric key using the private key of an X.509
    ... The problem is related to the certificate store on the web service side. ... You installed the certificate in "OtherPeople" store but the policy points ... You should install the certificate in the "Personal" store. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • RE: updates after format
    ... if the Microsoft Server is down. ... software you are installing has not passed Windows Logo testing verify its ... When you try to download an ActiveX control, install an update to Windows ... and you do not have the appropriate certificate in your Trusted Publishers ...
    (microsoft.public.windows.mediacenter)
  • Re: Automating Installation of Certificates for ADAM
    ... Normally, this is a good place to ask ADAM questions, but given that your ... We use a dedicated domain service account for ADAM. ... able to create a certificate request and install the certificate into the ... Local Computer Store using certreq, and export a pfx file using a VBScript ...
    (microsoft.public.windows.server.active_directory)
  • Re: Programmatically installing Client Root Certificates
    ... You install root certificates into the "root" store. ... the certificate to the root store. ...
    (microsoft.public.platformsdk.security)