How to Use the Certificates Console - Tech. Net Articles - United States (English)Applies to Windows 2. Windows XP, Windows Server 2. Windows Server 2. R2, Windows Vista, Windows 7, Windows Server 2. Windows Server 2. R2, Windows 8, and Windows Server 2. Overview. The Certificates console is an Microsoft Management Console (MMC) snap- in that you can use to manage the certificate stores for users, computers, and services. You can use the Certificates console to perform the following tasks: View information about certificates, such as certificate contents and the certification path. Import certificates into a certificate store. Move certificates between certificate stores. Export certificates and, optionally, export private keys (if key export is enabled). Delete certificates from certificate stores. Request certificates from an enterprise CA for the Personal certificate store. To add a Certificates console to MMCOpen MMC.
If you do not already have a customized MMC console, you can create one. To do so, open a Command Prompt, Windows Power. Shell, or the Run dialog box, type. MMC and then press ENTER. If you see a. User Account Control prompt, ensure that it is displaying the action you want to take and then click. Yes. Click Console, and then click Add/Remove Snap- in. The Add/Remove Snap- in dialog box appears. The Add Standalone Snap- in dialog box appears. Select Certificates from the list of snap- ins, and then click. Add. The Certificates Snap- in dialog box appears. Select one of the following accounts: My user account. Service account. Computer account. The Certificates console manages the certificate stores for this account. Click Next . If you selected My user account , the Add Standalone Snap- in dialog box appears. You can click Add to add another snap- in. To manage the local computer, click. Next . To manage another computer, either type the domain name of the computer in. Another computer , or click Browse to select the computer from a list. Then click. Next . If you selected Computer account , the Add Standalone Snap- in dialog box appears. You can click Add to add another snap- in. Select a service from the Servicesaccount list, and click Finish . When the. Add Standalone Snap- in dialog box appears, you can click. Add to add another snap- in. When you are finished adding snap- ins, in the Add Standalone Snap- in dialog box, click Close . The Add/Remove Snap- in dialog box appears and displays the snap- ins that you are installing in MMC. The first Certificates console node manages certificates for the logged on user. The second Certificates console node manages certificates for the World. Wide Web Publishing service for the local computer. The third Certificates console node manages certificates for the local computer itself. Certificates Console (shown from a Windows 2. The Certificates console nodes in the figure above have been expanded to show the logical certificate stores. This is called the. Logical display mode. You also have the option of viewing certificates by their physical stores or by their purpose. Click View and then click. Options . When the View Options dialog box appears (as shown in the following figure from a Windows 7 operating system), which allows you to select certain display mode options. The View Options options are described in the following table. View Options Dialog Box. Option. Description. Certificate purpose. I need to login to a remote into either a Win7 or Vista computer but when I connect I get a Logon Message "Another user is currently logged on." but it does not. Applies To: Windows SBS 2008, Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1. Microsoft Management Console (abr. MMC) est un gestionnaire de console virtuelle incorporé dans Microsoft Windows, qui sert de conteneur pour des interfaces. Select this option to view certificates in the Purposes display mode, in which certificates are grouped by the intended purpose of the certificates, such as Encrypting File System, File Recovery, and Code Signing. Logical certificate stores. Select this option to view certificates in the Logical display mode, in which certificates are grouped by the logical store where they are located. This is the default display mode. Physical certificate stores. Select this option to view the physical stores in addition to the logical stores. This option is available for the Logical display mode only. Archived certificates. Select this option to view archived certificates. When certificates expire or are renewed, an archived version is retained of the certificate and its private keys. Retaining archived certificates is recommended because you might need to use the certificate. For example, you might have to verify digital signatures for old documents that were signed with a key for a currently expired or renewed certificate.< return to top> To view information about a certificate. In the Certificates console pane, select the certificate store where the certificates that you would like to learn more about are located. For example, you can select the. Personal store. In the details pane, double- click the certificate that you would like to learn more about. You can click each of these tabs to learn more about certificate issuance, issuance purposes, certificate thumbprint, trust path, and so on. For example, you can right- click the Personal. Certificates container below that store and then click. Import. The Certificates container below the store appears only when there are existing certificates in that container. Otherwise, you will just have the certificates store. On the Welcome to the Certificate Import Wizard screen, click. Next. On the File to Import screen, enter the file path and file name of the file the certificate that you want to import and then click. Next. If the file is password protected, you may be prompted to enter the password at this point. If so, enter the password and then click. OK. On the Certificate Store screen you can select the Automatically select the certificate store based on the type of certificate, or. Place all certificates in the following store option. You can use the. Browse button to locate a different certificate store. Once you have these options configured correctly, click. Next. On the Completing the Certificate Import Wizard screen, verify the import information and then click. Finish. Click OK to confirm the importation. For example, you can move a certificate from the Personal store to the Trusted Root Certification Authorities store on the Local Computer. However, you cannot move a certificate from the Personal. Local Computer to the Personal store of the User. If you want to move certificates between accounts, first export the certificate from one account and then import the certificate to the other account. In the Certificates console pane, select the Certificates. For example, if you want to move a certificate from the Personal store, expand the. Personal store and select the Certificates container below it. If there is no. Certificates container below the store to which you want to move the certificate, then select the destination certificate store itself. This will move the certificate from the source store to the destination store. To do so, you can select the certificate in the details pane of the source certificate store. Hold the primary mouse button and then drop the certificate by releasing the mouse button. For example, if you want to export a certificate from the Personal store, expand the. Personal store and select the Certificates container below it. Otherwise, the option to export the private key will not be available. Click. Next. If you had the option and selected, Yes, export the private key, then you will be asked for a password for the certificate. If you have Windows 8 or Windows Server 2. Group or user names and specify Active. Directory Domain Services (AD DS) user or group accounts. This option is only successful if you have a Windows Server 2. Protect the file (as appropriate) and then. Next. On the File to Export screen, enter the full file path and file name for the certificate file you want to export. You can also use the. Browse button to select the location and set the file name. Click. Next. On the Completing the Certificate Export Wizard screen, confirm the export options and then click. Finish. Click OK to confirm the export. If you delete a certificate with private key, then you will no longer be able to read encrypted data that uses that certificate. Ensure that you no longer need the certificate (especially. In the Certificates console pane, select the Certificates. For example, if you want to delete a certificate from the Personal store, expand the. Personal store and select the Certificates container below it. For example, if you want to request a certificate for the Personal store, expand the. Personal store and select the Certificates container below it. If there is no. Certificates container below the store, you can just select the store. On the Select Certificate Enrollment Policy screen, select the specific enrollment policy that you want to use or click. Add New. This is something that a certificate administrator would have had to configure in advance and provide. If this is. the case, Type the appropriate URI under Enter the enrollment policy server URI. Set the appropriate Authentication Type: Windows integrated. Username/password, or X. Certificate. Use the Validate Server option to verify that the server is available, and then click. Add. If a caution symbol appears below the certificate, you might need to provide additional information before requesting that type of certificate. Click the. . Click here to configure settings. On the Request Certificates screen, select the enrollment policy that you want to use and then click. Enroll. On the Certificate Installation Results screen, you will see the status message of the enrollment. If the status of the certificate request is. Pending, then a certificate administrator must approve the request. The certificate request may also be denied for various reasons. You can learn more about the status of the certificate request by clicking. Details. If you see additional details, you can also click. View Request, to see the certificate request that was made. Once you have verified enrollment status, click Finish. This is something that a domain administrator must configure through Group Policy. Auto- Enrollment is available for. Download Biz. Talk Health Monitor v. Official Microsoft Download Center. Biz. Talk Health Monitor (BHM) can be added to the existing Biz. Talk Administration Console or run individually to provide the following features.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. Archives
March 2018
Categories |