Project

General

Profile

Storing a Windows 7 Machine Certificate » History » Version 1

Martin Willi, 20.01.2009 06:38
Store first part of Win7Certs page

1 1 Martin Willi
= Storing Windows 7 Machine Certificates =
2 1 Martin Willi
3 1 Martin Willi
First call up the ''Microsoft Management Console'' (mmc) and add the Certificates Snap-In:
4 1 Martin Willi
5 1 Martin Willi
[[Image(htdocs:snapin_add.png)]]
6 1 Martin Willi
7 1 Martin Willi
It is of the '''utmost importance''' that you select ''Computer account'':
8 1 Martin Willi
9 1 Martin Willi
[[Image(htdocs:snapin_computer_account.png)]]
10 1 Martin Willi
11 1 Martin Willi
Go into the ''Certificates (Local Computer) / Personal / Certificates'' folder 
12 1 Martin Willi
13 1 Martin Willi
[[Image(htdocs:snapin_personal_certificates.png)]]
14 1 Martin Willi
15 1 Martin Willi
and select the ''Import'' action which will start the ''Certificate Import Wizard'': 
16 1 Martin Willi
17 1 Martin Willi
[[Image(htdocs:cert_import_wizard.png)]]
18 1 Martin Willi
19 1 Martin Willi
'''Never double-click''' on a PKCS12 certificate file because the content will end
20 1 Martin Willi
up in the ''current user'' instead of the ''local computer'' part of the Windows registry
21 1 Martin Willi
and will not be available for IPsec. A PKCS12 container contains the ''end entity certificate'',
22 1 Martin Willi
a corresponding ''private key'' and usually the ''Root CA certificate''. It is recommended
23 1 Martin Willi
to store all this information in the ''Personal'' certificate store and to move the Root CA certificate
24 1 Martin Willi
to the correct location later on.
25 1 Martin Willi
26 1 Martin Willi
[[Image(htdocs:cert_import_wizard_store.png)]]
27 1 Martin Willi
28 1 Martin Willi
29 1 Martin Willi
[[Image(htdocs:cert_import_wizard_path.png)]]