Unable to install pfx 1

[harmmeijer]

Doesn't work on our company's standard PC.
I made sure I have the IE 6 128 bit versrsion The registry is what it should be (same as a PC where it does work) so the following does not apply

http://support.microsoft.com/kb/q182054/

My account belongs to the local Administrators group. I can install the key using an account that is mameber of local administrators goup and a domain administrator account.
I can install the key for the computer account loged on with my domain account.
I think it is some polciy but cannot find it.

To install the key as the domain's local admin group or domain admin group is not an option becuase users require their personal key. The key is only available to the person who installed it.



Greetings, Harm Meijer

 

[bcastner]

http://www.codecomments.com/Windows_Server_Scripting/message470200.html

 

[harmmeijer]

Thanks for that link, that should help me out when and if I need to distribute it.
In case that link doesn't work anymore in the future here's a breif summarise.
distribute a .pfx private key using a script or GPO to many users to be installed on currentUsers.

The personal certificate store name is "my":
certmgr.exe -add -c "mypfxi" -s -r currentUser my
assume that "mypfxi" represents the actual file name including the file extension.
If the pfx is password protected CAPICOM (MS website)
Capicom.dll (activex)needs to be copied to and registered on the computers to use it.

I failed to mention that I manually tried to install the pfx and cer file. There is a long way to go to distribute it.
When I use the CAPCOM and automate it using a .net console application if gives a certificate not instantiated exception. But again on a pc that I installed myselve using the same domain account there is no problem.



Greetings, Harm Meijer