Scripting EFS certificat export

[deanc]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

Hi,

Does anyone know if there is some way to script the process to export
user certificate? We know using Certificate MMC Snap-in to export user
EFS certificate and private key. Because the process involves so many
steps and technology terms and words, regular users don't even have a
clue when checking the options. Ideally we would like to create a
script and give the users the only option to enter their password when
exporting the EFS certificate.

Anyone, particularly MS online support, knows what API calls we can use
in a VBscript to do this work?


Thanks in advance,

Dean

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

<deanc@wagged.com> wrote in message
news:1121713527.126406.289970@g43g2000cwa.googlegroups.com...
> Hi,
>
> Does anyone know if there is some way to script the process to export
> user certificate? We know using Certificate MMC Snap-in to export user
> EFS certificate and private key. Because the process involves so many
> steps and technology terms and words, regular users don't even have a
> clue when checking the options. Ideally we would like to create a
> script and give the users the only option to enter their password when
> exporting the EFS certificate.
>
> Anyone, particularly MS online support, knows what API calls we can use
> in a VBscript to do this work?
>
>
> Thanks in advance,
>
> Dean
>

There is a command line program "cipher" which could be called from a
script. Type cipher /? at a cmd prompt for details. The online docs and XP
help don't have all the switches documented. Cipher /x should do the trick.

Kerry

 

[deanc]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

Thanks Kerry!

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

<deanc@wagged.com> wrote in message
news:1122270951.061495.64630@g43g2000cwa.googlegroups.com...
> Thanks Kerry!
>

Your welcome. Make sure you test restoring the keys exported this way. EFS
is full of pitfalls for the unwary.

Kerry