You can create your own certificate store under local machine, or use an existent one.
See http://msdn.microsoft.com/en-us/library/aa388136(v=vs.85).aspx for details about where store are located and access right. I can suppose userA and userB as affiliated to the same group users. Da: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] Per conto di Harshvir Sidhu Inviato: mercoledì 9 marzo 2011 13:45 A: openssl-users@openssl.org Cc: Francesco Petruzzi Oggetto: Re: Certificate Access Question Hi, Do you mean i should install client certificate into trusted root certificate? // Harshvir On Wed, Mar 9, 2011 at 5:05 AM, Francesco Petruzzi <francesco.petru...@innovery.it> wrote: If your service uses my in order to retrieve certificate it only reads its certificate (service launcher UserA), you can save certificate for LocalMachine but your service must use local machine store to retrieve certificate and not my (personal) store. Da: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] Per conto di Harshvir Sidhu Inviato: martedì 8 marzo 2011 17:43 A: carlyo...@keycomm.co.uk Cc: openssl-users@openssl.org Oggetto: Re: Certificate Access Question I checked this function, its for installing Certificate without User Interaction. But my problem starts after Certificate Installation, that certificate installed by one user is not accessible to another user. Thanks. On Tue, Mar 8, 2011 at 10:06 AM, <carlyo...@keycomm.co.uk> wrote: I used PKCS#12 files and CryptUIWizImport with these flags: DWORD flags = CRYPTUI_WIZ_NO_UI | CRYPTUI_WIZ_IMPORT_TO_LOCALMACHINE | CRYPTUI_WIZ_IMPORT_ALLOW_CERT | CRYPTUI_WIZ_IMPORT_NO_CHANGE_DEST_STORE; and it all works for me. On Tue 08/03/11 2:20 PM , Harshvir Sidhu hvssi...@gmail.com sent: Hi, I dont think this question is related to openssl, but just checking if someone has done something like this. I have a service that runs under UserA, and my desktop user is UserB. When I install certificates using UserB, then i am not able to access them in UserA, for the obvious reason that personal certificates go in Registry, for trusted root there is an option to install on Local computer, which i can access, but client certificate is not accessible. I tried using MMC to install certificates for Service user account, but still its not working. Any suggestion on how can i do this using Windows Certificate Store, another option will be to use certificate as files, but i want to use Certificate store. Thanks. // Harshvir
