Installing Certificates on XP clients

[Paco]

Hi!

I'm sitting on a windows 2003 r2 server and windows xp enviroment.

I have two certificates that I need to get installed on the client computers.
The first one name.cer I can easily put in a group policy and have it
distributed to all the clients. It ends up nicely among the 'Trusted Root
certivication Authorities'.

But the second one name.pfx needs to go into the 'Personal certificates'.
Anyone that has an idea about how to get this to work, can I still use gpo
or do I need to use something else?
I rather not have to run out to all the clients and manually install it there.

Thank you for your time and effort
Best regards
Paco

 

[Paco]

No one has any idea?

Best regards
Paco

 

[Ace Fekay [MCT]]

"Paco" wrote in message
news:96D84D30-6400-47AE-BE22-B82F879C55B3@microsoft.com...
> No one has any idea?
>
> Best regards
> Paco


The following was quoted from:
http://www.experts-exchange.com/Software/I...Q_24127113.html

"You can deploy root certificates via GPO, but anything else would have to
be done via script - you could make a logon script install it I suppose but
that's about as close as you're going to come. Usually a PFX file will have
a password associated, so scripting usually isn't a great option due to
that. Having a PFX without a password isn't secure and pretty much negates
the security of the certificate. Either deskside support or some sort of
remote assistance program would typically be appropriate in this case.

Windows 2003 and 2008 are no different."

You can also try using CAPICOM. I believe you can create a cstore.vbs
script to import the certificate with this utility, however I've never tried
it.

Introducing CAPICOM
http://msdn.microsoft.com/en-us/library/ms995332.aspx

Platform SDK Redistributable: CAPICOM
http://www.microsoft.com/downloads/details...&displaylang=en


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCTS 2008, MCTS Exchange, MCSE, MCSA 2003 & 2000, MCSA
Messaging
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.