"... exported the certificate to the same shared folder."

From: M. Jennings (mjennings_at_-NOTthis-or-dashes-myrealbox.com)
Date: 03/18/05 

Date: Fri, 18 Mar 2005 19:25:11 -0300

Kerry,

You said, "I logged in as myself and exported the certificate to the same
shared folder."

I don't know what that means. Could you explain? I don't know how to export a
certificate to a folder.

Michael

__________________

Kerry Brown wrote:
> "M. Jennings" <mjennings@-NOTthis-or-dashes-myrealbox.com> wrote in message
> news:uYWTtl$KFHA.3356@TK2MSFTNGP12.phx.gbl...
>
>>Kerry,
>>
>>Excellent. However, I haven't been able to make it work. I must be doing
>>something wrong, obviously.
>>
>>I was worried about backing up the wrong certificate, so I deleted my
>>personal certificates from:
>>
>>Local Computer Policy/ Windows Settings/ Security Settings/ Public Key
>>Policies/ Encrypting File System/
>>
>>and
>>
>>Certificates - Current User/ Personal/ Certificates/
>>
>>and
>>
>>Certificates - Current User/ Trusted People/ Certificates/
>>
>>However, I am still able to decrypt a pre-encrypted file.
>>
>>So, which Certificate is active, and where is it? Second, how can a
>>certificate be enough, when the certificate does not include the private
>>key?
>>
>
>
> Run mmc.exe. Add in the Certificates snap in. When prompted pick "Manage
> certifcates for my user account". Expand the Personal tree. Look in the
> Certificates folder. There was only one cert there it had my user name.
> Right click on it and check the properties to make sure it is the efs cert.
> Under "All Tasks" pick export and follow the prompts making sure to save the
> private key with it.
>
>
>>You were logged in as Administrator? Where did you export the Certificate
>>and private key? Where did you import it.
>>
>
>
> No I wasn't logged in as administrator. I encrypted a file, then logged in
> as a different user to confirm I couldn't access the file. I logged back in
> as myself and moved the file to a shared folder on a server. At this point
> other users could see the file but couldn't access it. I logged in as myself
> and exported the certificate to the same shared folder. I went to another
> computer, logged in as a different user again and tried to access the file.
> Access was denied. I imported the certificate with the Certificates mmc snap
> in. I was then able to access the encrypted file no problem.
>
>
>>I'm not on a domain. These are laptop computers I am using for test.
>>
>
>
> Should work the same. Hope this helps.
>
> Kerry
>
>

Relevant Pages

  • Re: I-Mate KJAM
    ... a reasonable self generated certificate. ... Exchange on Windows SBS Server 2003. ... Create a shared folder in which to store the certificate. ... Install the certificate on the Windows Mobile device. ...
    (microsoft.public.windows.server.sbs)
  • I will give it another try.
    ... >>So, which Certificate is active, and where is it? ... > private key with it. ... > as myself and moved the file to a shared folder on a server. ... These are laptop computers I am using for test. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Excellent. However, I havent been able to make it work.
    ... > So, which Certificate is active, and where is it? ... private key with it. ... as myself and moved the file to a shared folder on a server. ... Kerry ...
    (microsoft.public.windowsxp.security_admin)
  • Re: EFS and Certifate Server
    ... The users need access to the private keys associated with the certificate, ... EFS isn't really designed to be highly workable ... > shared folder for the encrypted folder to be located. ...
    (microsoft.public.windows.server.general)
  • RE: SIMple SSL question ??
    ... I believe your book is instructing you to keep the private key secure. ... you use the certificate request wizard in IIS to install the cert after it's ... the certificate that's just been installed. ... If an attacker retrievs the SSL certificate, ...
    (microsoft.public.dotnet.security)
Quantcast