IE Certificates upon V90L

  • This topic is empty.
Viewing 5 posts - 1 through 5 (of 5 total)
  • Author
    Posts
  • #1275
    AvatarGOwen
    Member
    • Total Post: 3
    • Newbie

    I need assistance in creating a WDM package script that will copy, then import a certificate file (.cer) into the Trusted Root Certification Authourites tab of IE6. Currently I can sucessfully manually imported the certificate into IE for both the User and Administrator accounts.

    The V90L is setup in a workgroup rather than a domain, so deployment via Group Policy is not an option.

    thanks

    #13269
    ConfGenConfGen
    Keymaster
    • Total Post: 11107
    • Jedi Master
    • ★★★★★★★

    Hi,

    although I do not have a WDM script for you I can maybe guide you a bit.
    First you have to find out where the certificate file is stored on the unit. Then find out what registry keys are used.
    Knowing this is at least 90% of all information you need.
    Now creating the rsp file is quite easy.
    Use
    XC to copy the file
    and
    MR to merge a key to the registry.

    All parameters are described in the WDM online help.

    CG

    #13285
    Avatarthinkthin
    Member
    • Total Post: 1707
    • Jacked into The Matrix
    • ★★★★★★

    No problem,

    You can import these via a command line, let be dig up the material…

    Cheers,
    -TT

    #13303
    AvatarGOwen
    Member
    • Total Post: 3
    • Newbie

    Thanks for the information

    So far I have managed to copy the certificate file on the V90L and I am now trying to figure out which registry keys are being amended.

    #13330
    Avatarthinkthin
    Member
    • Total Post: 1707
    • Jacked into The Matrix
    • ★★★★★★

    Hi,

    Here is how I did it:

    Create a WDM package that copies certmgr.exe and the certificate to the Z: drive and then issue this command:

    certmgr.exe -add -c mycert.cer -s -r localMachine root

    From memory there was a caveat to which stores this could be imported into in XPe so you will hve to test. Google the certmgr.exe and you will find the Technet article on the supported switches for adddeleting certs, here is one link below but these change quickly on the MS site:

    http://msdn.microsoft.com/en-us/library/e78byta0(VS.80).aspx

    Cheers,
    -TT

Viewing 5 posts - 1 through 5 (of 5 total)
  • You must be logged in to reply to this topic.