|
Posted by Brian Komar [MVP] on August 28, 2006, 8:15 pm
Please log in for more thread options pg.gupta@gmail.com says...
> Hello,
>
> I need to write a service and a configuration program for windows 2000
> and windows 2003 servers that can use a digital certificate for client
> authentication (for https transactions). In desktop environment, I
> would expect the end-user to have installed the client certificate in
> the personal store (or user's My certificate store).
>
> In which certificate store do the server administrators typically
> install the client certificates? Is it in the Administrator account's
> personal certificate store? Would an import functionality to install
> the certificate in the machine's personal store be useful?
>
> Can anybody please comment.
>
> Regards.
>
>
It all depends on how you implement the service. I have seen
certificates installed both a machine account certificates (requiring a
local administrator to install the service to allow access) or
implemented with a specific service account and the certificate
installed in the profile of the service account.
As stated in another response, wherever you place the certificate and
private key, an account will reqire access to the key material
Brian
| 
XML Sitemap