User account to acces qualified certyficate from service


hi, 

im facing issue regarding qualified certyficate , rights acces te certyficate store.

1) have usb crypto card reader qualified certyficaate on plugged server

2) need able tu access process/service such sql server agent able sign in automatically using certificate.

problem whe i'm logged in usera, install certyficate run test works fine, certyficate not visible process if signs in using usera credentials. presume because of session isolation (works on xp , below)

the account can access certificate store (the account on whitch service runs) localsystem. far as  know poses security treat, , hoting company states problems when comes mirroring.

so question is: possible create user or better: domain user, able acces certyficate store , use usb crypto key via  windows service.

any tips or sugestions welcome.

try change account on service runs local system usera. what's result?



Windows Server  >  Security



Comments

Popular posts from this blog

List Styles

for loop and start-job from cmd.exe

The Windows Management Instrumentation (WMI) service cannot be started . Failed