Importing root certificates in Vista

[Juan Segarra]

Hi all. I was trying to import a root certificate into Vista. I've
observed that when the automatic certificate store selection (my OS is
in Spanish, sorry if it isn't exactly) option in activated, the cert
is stored into intermediate CAs store and not into root certificates
store. Windows XP doesn't present this behaviour. I've finally
selected the store manually.

Do you know why this feature has been implemented like this? It's just
curiosity...

Thanks in advance,

Juan.

 

[Haitao Li]

Yes, it was implemented this way in Vista.

 

[Juan Segarra]

Ok... but why a root certificate "has to live" (by default) into the
intermediate store? That's what i don't understand... is there any
security issue related with this behaviour? That's what i really mean
with my question. Sorry, but my English is really, really ugly

Thanks in advance

 

[Brian Komar]

Ok... but why a root certificate "has to live" (by default) into the
intermediate store? That's what i don't understand... is there any
security issue related with this behaviour? That's what i really mean
with my question. Sorry, but my English is really, really ugly

Thanks in advance

It is a protection mechanism to prevent users from accidentally adding
trusted root store certificates. Once added, implicit trust is established.
Brian

 

[Juan Segarra]

Thanks Brian

 

[Guest]

Hi

I have the same problem with Vista. I try to install a CA certificate
manualy in Trusted Root Certification Authorities, but it goes in
Intermediate and not helping me to install the second certificate, which is a
client one. What should be the problem?

Thanks
Bogdan