Silent certificate installation

Silent certificate installation

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Silent certificate installation Nelson Guerrero 02-21-2007
Posted by Nelson Guerrero on February 21, 2007, 4:02 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi guys, does anybody know how to install a certificate on the client
machine silently? I already set up the CA authority and it is issuing
certificates automatically. When I click to install the certificate I
receive 2 messages warning me about the installation of the certificate.
Is there any way to install the certificate without user intervention? I
mean, a script that I can do, a .NET app, what ever works .... I'll
appreciate any clue, cause I don't know where to start.
Thanks,
Nelson

Posted by Brian Komar [MVP] on February 21, 2007, 5:49 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
neshon@hotmail.com says...
> Hi guys, does anybody know how to install a certificate on the client
> machine silently? I already set up the CA authority and it is issuing
> certificates automatically. When I click to install the certificate I
> receive 2 messages warning me about the installation of the certificate.
> Is there any way to install the certificate without user intervention? I
> mean, a script that I can do, a .NET app, what ever works .... I'll
> appreciate any clue, cause I don't know where to start.
> Thanks,
> Nelson
>
These were added in MS02-048 (KB323172) -
http://support.microsoft.com/kb/323172

No. You cannot remove these if you are installing using
the Web interface. The danger is that if you disable the
controls, any bad guy can install certificates into the
user store and add certificates to the root store
without the user's knowledge.

I have a script included with my PKI book (enroll.vbs)
that will work for XP/2000/2003 with capicom installed
that will accomplish what you want.
http://www.microsoft.com/MSPress/books/6745.aspx

Brian

Similar ThreadsPosted
How can I automate Certificate Installation ... ! January 18, 2006, 11:29 am
Re: Microsoft criticized for silent patches April 21, 2006, 9:18 am
unpermitted installation November 29, 2005, 10:14 am
AD CS 08 - Installation UI question: January 31, 2008, 4:57 pm
Program installation history August 26, 2005, 4:36 pm
Windows Defender Installation May 27, 2006, 11:59 am
Help PKI installation - lots of questions ! December 27, 2007, 9:55 am
Problems with Forefront installation. May 15, 2008, 2:54 pm
Product Activation & re-installation July 20, 2008, 12:03 pm
Re-installation advice - Stefan Kanthak February 13, 2006, 9:35 am

The site map in XML format XML site map

Contact Us | Privacy Policy