将SmartCard证书获取到Windows服务本地存储(MMC) [英] Getting SmartCard certificate into Windows service local store (mmc)

问题描述

我需要智能卡中的证书才能位于Windows服务本地目录中.我用mmc->管理单元->证书打开了商店.我使用了不同的小工具来查看有关我的智能卡的信息(ATR等)，并且它们都可以解决.

I need the certificate from my smart card to be in the Windows service local sotre. I opened the store with mmc -> snap-in -> certificates. I used different little tools to see informations(ATR etc.) about my smartcard and they all worked out.

我在那里可以看到很多证书，但是商店中缺少我的智能卡证书.智能卡受信任的根"文件夹为空.Windows会自动从智能卡获取.cer/.pfx数据，对吗?还是没有机会，我可以不使用低级编程(APDU命令等)来做到这一点

I can see a lot of certificates there, but the one from my smartcard is missing in the store. The folder 'Smartcard trusted Roots' is empty. Windows gets the .cer/.pfx-data from smart cards automatically, right? Or is there no chance, i can do it without using low-level programming(APDU-commands etc.)

推荐答案

首先阅读以下内容: http://technet.microsoft.com/en-us/library/ff404288(v = WS.10).aspx

如所写

1. 已登录的用户插入智能卡.
2. 已通知CertPropSvc已插入智能卡.
3. CertPropSvc从所有插入的智能卡读取所有证书.证书将被写入用户的个人证书存储中

是的，一般来说，证书应该自动在用户个人证书存储"中弹出.

So yes, gnerally certificates should pop up in User Personal Certificate Store automatically.

首先要检查的是您是否具有CertPropSvc服务runnig.我看到的另一件事是，某些智能卡驱动程序不适用于Windows API.我知道的一个例子是旧的RSA令牌.我们已将它们更改为金雅拓.NET卡和

First thing to check is that you have CertPropSvc service runnig. Another thing that I saw that some smart cards drivers doesn't work with Windows API. One example I know was old RSA tokens. We have changed them to Gemalto .NET cards and USB readers because of this

注意:在我链接的文章中，它写为Windows 7和2008有效，但在XP和Vista上对我有效.

Note: In the artcle I linked it's written that this is valid for Windows 7 and 2008 but it worked for me on XP and Vista.

这篇关于将SmartCard证书获取到Windows服务本地存储(MMC)的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！