Project

General

Profile

Storing a Windows 7 Machine Certificate » History » Version 1

Version 1/9 - Next » - Current version
Martin Willi, 20.01.2009 06:38
Store first part of Win7Certs page


= Storing Windows 7 Machine Certificates =

First call up the ''Microsoft Management Console'' (mmc) and add the Certificates Snap-In:

[[Image(htdocs:snapin_add.png)]]

It is of the '''utmost importance''' that you select ''Computer account'':

[[Image(htdocs:snapin_computer_account.png)]]

Go into the ''Certificates (Local Computer) / Personal / Certificates'' folder

[[Image(htdocs:snapin_personal_certificates.png)]]

and select the ''Import'' action which will start the ''Certificate Import Wizard'':

[[Image(htdocs:cert_import_wizard.png)]]

'''Never double-click''' on a PKCS12 certificate file because the content will end
up in the ''current user'' instead of the ''local computer'' part of the Windows registry
and will not be available for IPsec. A PKCS12 container contains the ''end entity certificate'',
a corresponding ''private key'' and usually the ''Root CA certificate''. It is recommended
to store all this information in the ''Personal'' certificate store and to move the Root CA certificate
to the correct location later on.

[[Image(htdocs:cert_import_wizard_store.png)]]

[[Image(htdocs:cert_import_wizard_path.png)]]