Windows: Importing a certificate for a service

Windows has several different certificate stores.  Using certmgr.msc allows a certificate to be installed for the current user.

However; to make a certificate available to services and other process that run under the Local System or Local Service accounts, you must import the certificate into the the Local Computer store.

To import the certificate, set up a connection the the local computer’s certificate store:

1. Start -> Run: mmc.exe
2. Menu: File -> Add/Remove Snap-in…
3. Under Available snap-ins, select Certificates and press Add>.
4. Select Computer Account for the certificates to manage.  Press Next.
5. Select Local Computer and press Finish.
6. Press OK to return to the management console.

Then, import the certificate:
1. Select: Console Root -> Certificates (Local Computer)
2. Continue and select: Trusted Root Certification Authorities -> Certificates.
3. Right click on Certificates and select All Tasks -> Import…
4. Follow the import wizard and import your certificate normally.

References:

• http://technet.microsoft.com/en-us/library/cc754431.aspx
• http://msdn.microsoft.com/en-us/library/ms788967.aspx

Advertisement