Expiring Today—Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Certificate import- windows 7

Posted on 2013-12-02
2
Medium Priority
?
548 Views
Last Modified: 2013-12-23
Hello
Installing certificates to the CA and the local personal computer store on Windows 7 clients. Using Certutil I'm able to the get the certs imported on the client using:

CERTUTIL -f -p "password" -importpfx" %LOGONSERVER%\netlogon\certificates\machine_cert.p12"

CERTUTIL -addstore -enterprise -f -v root "%LOGONSERVER%\netlogon\certificates\RootCA .pem"

However, the machine cert is getting imported into the Intermediate Certificate Authorities as well as the personal computer store. Is this due to the syntax I'm using above or just normal behavior? The machine cert only needs to be imported into the personal computer store so if possible don't want to import the cert where its not needed.
Thanks for the help
0
Comment
Question by:jwill80
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 41

Accepted Solution

by:
footech earned 1500 total points
ID: 39693246
When I've used this the .PFX file has included a certificate chain so I would expect it to place each cert in the chain appropriately.  If your .PFX doesn't include a certificate chain that might be the reason for the behavior you're seeing.
Have you tried the NoChain or NoRoot modifiers for the certutil command?
0
 
LVL 1

Author Comment

by:jwill80
ID: 39736625
Since having the cert imported into the intermediate store isn't causing any issues will let CertUtil import it.
0

Featured Post

What Is Blockchain Technology?

Blockchain is a technology that underpins the success of Bitcoin and other digital currencies, but it has uses far beyond finance. Learn how blockchain works and why it is proving disruptive to other areas of IT.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While working, an annoying popup showing below will come and we cannot cancel or close it form the screen. The error message will come again and again.
The Windows functions GetTickCount and timeGetTime retrieve the number of milliseconds since the system was started. However, the value is stored in a DWORD, which means that it wraps around to zero every 49.7 days. This article shows how to solve t…
The viewer will learn how to successfully download and install the SARDU utility on Windows 7, without downloading adware.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question