Client Certificates in User Store

[Akusei]

Does anyone know of a way to install an x509 certificate into a different user's certificate store?

For example, on a local machine, Administrator has a .p12 file and wants to import (install) this certificate. The problem is that the Administrator does not want to install the certificate into the Administrator's certificate store. The administrator needs to install this certificate into a different user's certificate store or a store where all users can access the certificate.

Does anyone know of a way to do this?

 

[xmsre]

You can use ieak to create a custom install that pre-installs the certificate.

 

[Akusei]

Will IEAK allow me to install the certificate into that user's store without needing the user to login? The key here is that this user cannot login to the computer.

 

[xmsre]

The ieak custom install requires the user hit the site hosting the pac file. The user would have to be logged on.

Another approach would be to use something like regmon and observe where in the registry the certificate is stored. You could then export the key and use reg.exe to load each user's ntuser.dat and import the key. I've never tried this with certificates, however I have used this method for printers.