IIS Server Security - Cert Trust List

Author

Cert Trust List - Export & Import

Mark Pfeifer

2006-02-02, 5:54 pm

Is there a way (outside of custom code) to export a CTL list so we can
apply the same one to multiple servers?

TIA
Mark

WenJun Zhang[msft]

2006-02-03, 2:54 am

Hi Mark,

Sure, this can be done. After you create a CTL in IIS, please open mmc.exe,
add Certificates snap-in. Select Computer Account and look into the
Intermediate certification Authorities(CA) store. You will see the CTL
created in IIS and it can be exported as a .stl file.

The same task can also be done via a command line utility - Certmgr.exe
included in .net framework SDK:

Certificate Manager Tool (Certmgr.exe)
http://msdn2.microsoft.com/library/e78byta0.aspx

Hope the info helps. Have a nice weekend.

Best regards,

WenJun Zhang
Microsoft Online Partner Support

This posting is provided "AS IS" with no warranties, and confers no rights.