Certificate difference

[jedec]

Hi

I have computer X1 (w2K adv server, DC, CA enterprise).

Logged as user tom, request certifikate on http://x1/certsrv - OK, I
receive
and instal certifikate in IE.
In AD users and computers, for account Tom I can't see certifikate under
x509 tab - certificate is listed under IUSR_computername account.

With mmc snap-in (certificates-user) I can create user certificate for Tom
(with private key not exportable). This certificate is listed under AD users
and computers under x509 tab.

Questions:
1.How is web certificate request diffrent from mmc issued certificate (two
methods produce different certificates ?).

2.How can I export private key from user Tom certificate (is it necessary ?)

(I have access to technet but cant find answers to my questions)

 

[Vishal Agarwal[MSFT]]

Are you enrolling for different certificate templates (Via mmc and web
enroll)?

Thanks,
Vishal[MSFT]

 

[jedec]

No I use default settings
Dino

Are you enrolling for different certificate templates (Via mmc and web
enroll)?

Thanks,
Vishal[MSFT]

--
This posting is provided "AS IS" with no warranties, and confers no rights

Hi

I have computer X1 (w2K adv server, DC, CA enterprise).

Logged as user tom, request certifikate on http://x1/certsrv - OK, I
receive
and instal certifikate in IE.
In AD users and computers, for account Tom I can't see certifikate under
x509 tab - certificate is listed under IUSR_computername account.

With mmc snap-in (certificates-user) I can create user certificate for Tom
(with private key not exportable). This certificate is listed under AD users
and computers under x509 tab.

Questions:
1.How is web certificate request diffrent from mmc issued certificate (two
methods produce different certificates ?).

2.How can I export private key from user Tom certificate (is it

necessary

?)

(I have access to technet but cant find answers to my questions)