ansaurus

Question

makecert tool issue

Answer 1

+1 A:

Those are parts of the specification for how Windows locates the certificate storage. The -sr location parameter tells the tool which certificate store to use: either currentuser to store it for the user, or localmachine to store it for everyone on the machine. The -ss parameter let's you give a name for a particular store, so you could, for example, have

-sr currentuser -ss moe
-sr localmachine -ss moe

and have two different named stores -- one for the current user, one for the machine -- or have

-sr currentuser -ss moe
-sr currentuser -ss curly

and have two different stores for just the current user.

Charlie Martin 2009-03-16 04:35:00

Thanks Charlie, 1. another stupid question, any means to see current named stores for currentuser and localmachine? 2. I am still confused whether certificates are managed linearly (a linear named store) or in a hierarchy way?

George2 2009-03-16 05:20:41

Hierarchy way I mean certificate is managed under two layers, the first layer is currentuser/localmachine, and under the node of currentuser or localmachine, there could be named stores. Any comments or ideas?

George2 2009-03-16 05:23:02

The way I understand it is that it is a two-layer hierarchy, that is, there is a store for currentuser with (potentially) a bunch of named stores. I wouldn't depend on that, though: give it a try.

Charlie Martin 2009-03-16 05:25:12

Thanks Charlie, are there any tools or commands to check on my current Windows Server 2003, whether currentuser and localmachine store are created, and which sub-stores are in them?

George2 2009-03-16 07:31:26

George, I've got no idea; I don't even have a Windows box accessible.

Charlie Martin 2009-03-16 14:33:48

Answer 2

A:

If you need only to generate x509 certificate try X509Builder web application at http://ww.we-coffee.com/x509builder.aspx. You choice the certificate type you need, you fill a form with the certificate data and your certificate (the CA certificate and the certificate with rpivate key) will be sent to you

Matteo Slaviero 2009-09-19 09:41:03

Answer 3

A:

I'm not sure if it exists in windows server 2003 but in win XP i use the Microsoft Management Console to see all available certificates in windows store.

Type 'mmc' in run (from start menu) to open the MS management console.
Then go to 'File' menu and choose 'Add/Remove snap-in'.
Press Add button and now you can choose one of the user, service or computer account.

When you do this you will perfectly understand the diference between -sr and -ss option.

Zé Carlos 2010-06-09 17:54:00

ansaurus

tags:

views:

answers:

makecert tool issue

related questions