Link to home
Start Free TrialLog in
Avatar of CompProbSolv
CompProbSolvFlag for United States of America

asked on

Corrupted Certificate Store?

I have a client running XP Pro on which I came across an issue.  When I open the Certificate Manager, it lists the usual Stores (Personal, Trusted Root... , etc.) but has three odd ones at the end.  One is named with the square box character, the second has three square box characters, and the third has more boxes and some other odd character.

I am seeing a problem with the computer that may or may not be related to this.  In any case, it seems like an issue that should be resolved.

How do I delete these Stores?

It is unknown as to how long the problem has been there, so any sort of restoration would be a hit-and-miss proposition.  He has no system backups other than System Restore Points.
Avatar of Don Thomson
Don Thomson
Flag of Canada image

To delete a certificate

1. Open Certificates.

2. Do one of the following:
• If you are in Logical Certificate Stores view mode, in the console tree, click Certificates.

Where?

Certificates - Certificate holder  > Logical store  > Certificates


•      If you are in Certificate Purpose view mode, in the console tree, click Purpose.

Where?

Certificates - Certificate holder  > Purpose

3. In the details pane, click the certificate you want to delete. (To select multiple certificates, hold down CTRL and click each certificate.)

4. On the Action menu, click Delete.

5. Click Yes if you are sure you want to permanently delete the certificate.
Avatar of CompProbSolv

ASKER

I am aware of how to delete certificates, but I am trying to delete the three stores that have the odd names.
ASKER CERTIFIED SOLUTION
Avatar of Don Thomson
Don Thomson
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Sorry for the delay... had a difficult time getting back to the client's computer.

The keys were slightly different (as you suggested could be the case), but I did find the corrupted entries and was able to delete them.

The real trick to finding them all is to search for SystemCertificates and for EnterpriseCertificates in regedit and then see what you find.

Thank you for the info!
As per my note, search in Regedit for SystemCertificates and for EnterpriseCertificates to find the complete set of keys on different versions of Windows.