|
Posted by Brian Komar [MVP] on February 21, 2007, 5:49 pm
If you were Registered and logged in, you could reply and use other advanced thread options
neshon@hotmail.com says...
> Hi guys, does anybody know how to install a certificate on the client
> machine silently? I already set up the CA authority and it is issuing
> certificates automatically. When I click to install the certificate I
> receive 2 messages warning me about the installation of the certificate.
> Is there any way to install the certificate without user intervention? I
> mean, a script that I can do, a .NET app, what ever works .... I'll
> appreciate any clue, cause I don't know where to start.
> Thanks,
> Nelson
>
These were added in MS02-048 (KB323172) -
http://support.microsoft.com/kb/323172
No. You cannot remove these if you are installing using
the Web interface. The danger is that if you disable the
controls, any bad guy can install certificates into the
user store and add certificates to the root store
without the user's knowledge.
I have a script included with my PKI book (enroll.vbs)
that will work for XP/2000/2003 with capicom installed
that will accomplish what you want.
http://www.microsoft.com/MSPress/books/6745.aspx
Brian
|