none
User personal certificates don't migrate from Windows 7 to Windows 10 using USMT RRS feed

  • Question

  • I'm using USMT 10.0.17763 to migrate user data from Windows 7 to Windows 10 machines, the process is working quite well but a thing is disturbing our operations, user certificates are not migrating. 

    Migrating certificates from a Windows 7 o a Windows 7 machine seems to work well if scanstate launches with the parameter /targetwindows7 but I have not found a solution to migrate user certificates to Windows 10. In theory this is supported: 
    https://docs.microsoft.com/en-us/windows/deployment/usmt/usmt-what-does-usmt-migrate#a-href-idbkmk-4aoperating-system-components

    but is not working for me. In my testing efforts I have found that the loadstate says this in the log file:
    2019-03-14 12:01:38, Info                  [0x080000] V2VArbitrate: Arbitrating migration unit <System>\Additional Options\Windows Core Settings\Microsoft-Windows-CAPI2-certs (CCSIAgent)
    2019-03-14 12:01:38, Info                  [0x080000] V2VArbitrate: Source migration unit <System>\Additional Options\Windows Core Settings\Microsoft-Windows-CAPI2-certs (CCSIAgent) is not supported on the destination machine and it will not be restored

    Microsoft-Windows-CAPI2-certs is the manifest file which migrates the public key of the certificates, is defined in the CAPI2_certs-repl.man of USMT. This seems to indicate that certificate migration is not supported in this scenario and the documentation about it is buggy.

    Anybody has experienced this problem? Do you know some action that can help us with this problem?

    Thanks
    • Changed type pasqualm Thursday, March 14, 2019 12:12 PM
    Thursday, March 14, 2019 12:00 PM

All replies

  • I have done additional testing and the certificates are correctly migrated from a Windows 10 machine to another Windows 10 machine. The restore log says this about the manifest:
    2019-03-14 12:59:05, Info                  [0x080000] V2VArbitrate: Arbitrating migration unit <D79107325K_TEST\user1>\additional_options\additional_options\windows_core_settings\Microsoft-Windows-CAPI2-certs (CCSIAgent)
    2019-03-14 12:59:05, Info                  [0x080000] V2VArbitrate: Source migration unit <D79107325K_TEST\user1>\additional_options\additional_options\windows_core_settings\Microsoft-Windows-CAPI2-certs (CCSIAgent) has an equivalent on the destination destination
    • Edited by pasqualm Thursday, March 14, 2019 12:39 PM
    Thursday, March 14, 2019 12:39 PM