Cert Enrolling using IX509Enrollment and InstallResponse into a certain cert store seems not to be possible

답변됨 Cert Enrolling using IX509Enrollment and InstallResponse into a certain cert store seems not to be possible

  • miércoles, 19 de septiembre de 2007 13:48
     
     

     

    Hi there!

     

    I am using the interface X509Enrollment to enroll a certificate stored as a text file (base 64) on my harddisk (It's a "standalone" root cert from another Windows Server CA). Therefore I am calling .Initialize and InstallResponse with "AllowUntrustedRoot" set and the base64 encoded certificate. Unfortunately CertEnroll installs the certificate in the "Intermediate Certification Authorities" instead of the "Root Certification Authorities" (or "3rd party...") where I need it instead.

    So: Is there a way to tell InstallResponse which store it should use?

    (It's absolutely possible by double clicking on the b64 file and selecting the root store manually within this cert install wizard.)

     

    Best Regards,

    Tommi

Todas las respuestas

  • miércoles, 07 de noviembre de 2007 0:03
     
     Respondida

    CertEnroll does not support installing a certificate into trusted root store, for security reasons.