Standalone CA

[Teknoratti]

I'm having problems testing a new standalone CA and encrypting files using the certificates just downloaded.

scenario: I have a laptop which i've logged into locally. I built a standalone CA, not part of a domain. from the web browser on my local laptop I request a certificate from the CA. I issue the certificate from the server and download the cert on my laptop. When i attempt to encrypt a file it uses a cert already installed. At this point I went into my certificate store, deleted all the certificates except the one I wanted to use, then I went inside the registry and renamed the certificate hash entry so that it couldn't be used. The next time I tried to encrypt, a new cert was created in the certificate store and another certificate hash entry was made inside the registry.

My question is, how come the certificate I downloaded from the CA wasn't used, being as I deleted all the other certs. Why did it create a self signed cert?

In a workgroup environment I could see this as with no domain present the local laptop can't go out and find a CA, but I dont know why the cert I previously d'loaded didnt work.

 

[PScottC]

The most likely reason is that the issued certificate does not have the correct "Enhanced Key Usage" OID configured. The issued certificate should have the following OID configured: 1.3.6.1.4.1.311.10.3.4 (which is the OID for Encrypting File System)

More than likely, the certificate will also need specific settings in the subject and subject alternative name fields, but I would have to test.

Generally, you would use an Enterprise CA so that the machine would automatically acquire a template generated certificate. Since you don't have this available, you will have to get these settings configured by modifying the certificate request at the CA using the certutil command before issuing the certificate to the client.

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers