Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Importing a .pfx or .p12 file to a remote certificate store is not supported

I try to use MMC with SnapIn Certificates(Remote Computer) to import a p12 certificate into the Personal Certificate Store of a remote Windows 2008 Server Core computer.

Certificate Import Wizard tells me: 'Importing a .pfx or .p12 file to a remote certificate store is not supported'

Is there an alternative way to do this?

like image 660
AllWorkNoPlay Avatar asked May 30 '13 07:05

AllWorkNoPlay


People also ask

How do I import a PFX to a certificate store?

Start Windows Explorer and select and hold (or right-click) the . pfx file, then select Open to open the Certificate Import Wizard. Follow the procedure in the Certificate Import Wizard to import the code-signing certificate into the Personal certificate store.

How do I import a .p12 File?

Import a .p12 fileClick Tools > Internet Options. On the Content tab, click Certificates. Click Import.

Are p12 and PFX files the same?

p12 is an alternate extension for what is generally referred to as a "PFX file", it's the combined format that holds the private key and certificate and is the format most modern signing utilities use. If you have a . p12 file that you exported from Firefox or Safari just rename the . p12 extension to .


1 Answers

I found out that I can do everything with certutil and winhttpcertcfg like this:

1) add .p12 to Personal key store

 certutil -p P@ssword -importpfx cert.p12

2) add .cer certificate as trusted publisher

 certutil -addstore TrustedPublisher cert.cer

3) check which users have access to certificate

 winhttpcertcfg -c LOCAL_MACHINE\My -s certificate.name -l

3) grant access to certificate

 winhttpcertcfg -c LOCAL_MACHINE\My -s certificate.name -g -a [email protected]
like image 139
AllWorkNoPlay Avatar answered Sep 28 '22 07:09

AllWorkNoPlay