Gets and sets a value that specifies the name of the local certificate store.
A string which specifies the certificate store name. The default value is the current user's personal certificate store.
The CertificateStore property is used to specify the name of the certificate store which contains the security certificate to use when security is enabled for the server. The certificate may either be stored in the registry or in a file. If the certificate is stored in the registry, then this property should be set to one of the following predefined values:
| Store Name | Description |
|---|---|
| CA | Certification authority certificates. These are certificates that are issued by entities which are entrusted to issue certificates to other individuals or organizations. Companies such as Comodo and DigiCert act as certification authorities. |
| MY | Personal certificates and their associated private keys for the current user. This store typically holds the client certificates used to establish a user's credentials. If a certificate store is not specified, this is the default value that is used. |
| ROOT | Certificates that have been self-signed by a certificate authority. Root certificates for a number of different certification authorities such as Comodo and DigiCert are installed as part of the operating system and periodically updated by Microsoft. |
In most cases the server certificate will be installed in the user's personal certificate store, and therefore it is not necessary to set this property value because that is the default location that will be used to search for the certificate. This property is only used if the CertificateName property is also set to a valid certificate name.
If you are using a local certificate store, with the certificate and private key stored in the registry, you can explicitly specify whether the certificate store for the current user or the local machine (all users) should be used. This is done by prefixing the certificate store name with "HKCU" for the current user, or "HKLM" for the local machine. For example, a certificate store name of "HKLM:MY" would specify the personal certificate store for the local machine, rather than the current user. If neither prefix is specified, it will default to the certificate store for the current user.
This property may also be used to specify a file that contains the server certificate. In this case, the property should specify the full path to the file and must contain both the certificate and private key in PKCS #12 format. If the file is protected by a password, the CertificatePassword property must also be set to specify the password.
This property may also be used to specify a file that contains the server certificate. In this case, the property should specify the full path to the file and must contain both the certificate and private key in PKCS #12 format. If the file is protected by a password, the CertificatePassword property must also be set to specify the password.
InternetServer Class | SocketTools Namespace | CertificatePassword Property | Secure Property