Install a certificate in microsoft store

Question

Hi, I have some problems and i hope you will help me to solve these problems.
I would like to install CA trusted certificates in the microsoft certificate store.
I already know how to generate certificates requests, how to submit these requests to the CA and how to retrieve the issued certificates.
I found several examples on internet, which show how to store the issued certificates in a java keystore.
I also found how to export a certificate from a java keystore to a certificate file.
My problem is that the file generated doesn't containt the private key and cannot be installed to the user personnal certificate store.
So, my question is, how can we associate the private key generated during the request with this issued certificate?
And how to install this certificate to a microsoft certificate store?
I didn't get how or if keytool can do this work for me, and I searched for examples but I didn't find anything which can help me.
I'm sure this is not a new problem, so I hope you'll be able to help me.

Answer 1

I finally found by myself a way to solve my problem.
In fact, I wasn't able to install the retrieved certificate in the user personnal certificate store because I didn't associate the private key generated during request with the issued certificate.
I apologize for my posts and I hope I didn't disturb anyone.
Maybe some developpers may need a way to solve such problems, so I will explain what I choose to do, even if it may seem quite simple.
Actually, when I retrieve the certificate chain from the CA, I store it in a pkcs12 keystore.
I also put in this keystore the private key object corresponding to the PrivateKey which was generated during the certificate request.
KeyStore ks12;
ks12 = KeyStore.getInstance("pkcs12");
ks12.load(null, null);
// Import/insert the exported key entry into PKCS#12 key store.
ks12.setKeyEntry("", privateKey, password.toCharArray(), certtab); //certtab is the certificate chain
// Save key store on disk.
FileOutputStream fos = new FileOutputStream("your certificate.pfx");
ks12.store(fos, passsword.toCharArray());
fos.close();And then, all that is needed to do is to execute the pkcs12 file (the standard windows wizard will appear, so the user will be able to install the certificate in his personnal certificate store).
Bye.
Edited by: aurelien707 on Jul 8, 2008 2:17 PM