Can't add a root Certificate in Vista RC2

[Colin Messitt]

I'm trying to add a slef-signed Root Certificate (self made with MakeCert)
in Vista RC2. I double-click on the .cer file and go through the Wizard and
get to the point where it says "Import Successful". Then nothing.

On XP/SP2 after the "Import Successful" message I get a message warning I'm
trying to add a new Root Certificate. That doesn't appear on Vista RC2.

Am I doing something wrong or is my certificate maybe no good (although it's
fine in XP) or is this disabled in Vista at this point?

Colin.

[Jeffrey Tan[MSFT]]

Hi Colin,

Officially we current do not support Vista, since it is not released yet.
You will get more useful help from the Vista forums below:
"Security for Applications in Windows Vista"
http://forums.microsoft.com/MSDN/ShowForum.aspx?ForumID=116&SiteID=1

Anyway, I will try to contact the Vista security team to see if they can
confirm this issue, thanks.

Best regards,
Jeffrey Tan
Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

[Jeffrey Tan[MSFT]]

Hi Colin ,

Sorry for letting you wait. Based on the discussion the following steps
works on the test vista 5600 machine:

Open mmc
Certificate snap in
Local computer or current user or whatever store you would like to use
Click on personal/Certificates
Right click and select "all Tasks" and Import and import your certificate.

Can you give it a try and let me know the result? Thanks.

[Colin Messitt]

Ok that's imported ok, to the Trusted Root Certification Authorities store
on build 5744.

The surprising difference is that it didn't come up with the secuirty
warning dialog that XP does, the one that say "Your are about to install a
certificate from a certification authority (CA) that claims to represent..."

But as it's imported fine that's solved my problem.

Thanks,

Colin.

""Jeffrey Tan[MSFT]"" <je...@online.microsoft.com> wrote in message
news:BZYTvSq8...@TK2MSFTNGXA01.phx.gbl...

[Mitch Gallant]

Seems surprising that you don't get that warning message.
I wonder if that means that programatically an app could install a root
without a user security warning.
- Mitch

"Colin Messitt" <x2...@newsgroups.nospam> wrote in message
news:%23DrxMDr...@TK2MSFTNGP04.phx.gbl...

[Jeffrey Tan[MSFT]]

Hi Colin,

Thanks for the reply.

Based on the discussion, if you don't explicitly specify Trusted root
certification authorities store when going through wizard, wizard imports
root certificate into Intermediate certification authorities store and thus
doesn't show warning message. You need explicitly choose Trusted root
certification authorities store in the wizard.

Thanks