Groups | Blog | Home
all groups > dotnet web services enhancements > december 2006 >

dotnet web services enhancements : Registering certificates for WSE3 on Vista


Phil Lee
12/11/2006 12:05:51 PM
I currently have a batch file adapted from the WSE3 samples to register a
test certificate, like this:


set CERTNAME=MyCertificateName

certmgr -del -r CurrentUser -s AddressBook -c -n %CERTNAME%
certmgr -del -r LocalMachine -s My -c -n %CERTNAME%

certmgr -add -all -c public.cer -r CurrentUser -s AddressBook

set WP_ACCOUNT=NETWORK SERVICE
(ver | findstr "5.1") && set WP_ACCOUNT=%COMPUTERNAME%\ASPNET

winhttpcertcfg -i private.pfx -p vantage -c LOCAL_MACHINE\My -a
"%WP_ACCOUNT%"

Does anyone know how this should be modified to get it to work on Vista - in
particular Vista 64?

Thanks,
Phil Lee

stcheng NO[at]SPAM online.microsoft.com
12/12/2006 12:00:00 AM
Hello Phil,

As for the WSE 3.0 test certificate installing batch file, it just calls
the markcert.exe to create the test certificate and then use certmgr.exe to
add the certificates into machine and user store. I've tried running the
WSE 3.0's cert setup.bat file on VISTA(32BIT) and it worked correctly. Did
you get any particular error when running these commands?

Generally, if the .net framework 2.0 is installed correctly, you can run
the cert setup command under the .NET framework's command prompt.

Please feel free to let me know if you meet any further issues.

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead


Phil Lee
12/12/2006 3:05:23 PM
Steven,

thanks for the reply.

All I needed to do was run my batch file from an a command prompt running as
administrator.

Regards,
Phil Lee

[quoted text, click to view]
stcheng NO[at]SPAM online.microsoft.com
12/13/2006 12:00:00 AM
Hi Phil,

Yes, in vista, by default the UAC will prevent a user directly perform
adminstrative operations. You need to elevate the security context when
performing many privilege opeations such as install certificates, register
COM object,....

Anyway, glad that you've figured it out.

Have a good day!

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead


AddThis Social Bookmark Button