import Certificate in WIndow Xp

Question

I have created a temporary certificate.
I am trying to import this certificate.I am importing Certificate to Personnel store of Local Computer and then using FindPrivateKey solution to find privatekey file.

Th problem is after going to the private key file I am unable to set security permission for the ASP.NET process.
I tried using cacls.exe, but it threw exception - "It can be used only on NTFS drive". I tried changing use Simple File sharing from Tools - options - FileType , but still I am not able to set permission. Following command I am running:

cacls.exe "C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys533857c8564c40d87fe9c8bcef94827b_e74230a4-859f-4b07-9ece-dd19ba319af7" /E /G "MYPC\ASPNET":R  

and getting following error:

The Cacls command can be run only on disk that use the NTFS file system

My Os is Windows xp and FileSystem is FAT.

Answer 1

You could give winhttpcertcfg a try.

This command grants access to the private key of the "MyCertificate" certificate in the "My" certificate store for the TESTUSER account.

winhttpcertcfg -g -c LOCAL_MACHINE\My -s MyCertificate -a TESTUSER

http://msdn.microsoft.com/en-us/library/windows/desktop/aa384088(v=vs.85).aspx

Answer 2

It looks to me like the answer is in your question.

If your attempting to set permissions on a drive that is FAT32 then you wont be able to. FAT32 does not support permissions. You will need to convert the drive to NTFS.

Answer 3

The REAL solution is not the other two answers. If the key is not marked exportable you must put the certificate in the COMPUTER store, you state in your question that you put it in your personal store.

Open MMC and add the Certificate snap in. Set it to the Computer store and add the certifiacate. You will now be able to use the cert in IIS.