Installed client certificates not showing up in personal store in IE 6

[Russ]

I am having problems with getting client certificates to show up in IE
6 when I go to Tools->Internet Options->Content->Certificates.

I created the client cert using certificate services on a windows 2000
server box. I made sure to choose the "user certificate" option and
specify the usage as "client authentication". The cert I made is X509
base 64 encoded. When I imported the cert into IE (chose Personal
store explicity) it said "Successful", but it never shows up in the
Personal store in IE.

The weird thing is I can start certmgr from the command line as
follows:

certmgr -all -c -s My

and the cert I just installed shows up. However when I start the
graphical version of certmgr by not specifying any parameters on the
command line the view is the same as that in IE, the cert I just
installed doesn't show up.

To go along with this, I used the certificates mmc snap-in and the
cert shows up in the personal store for the current user there.

My question is this....how can the comamnd line certmgr and the
certificates snap-in show that the certificate is there and graphical
certmgr and IE both not show it? Is it or isn't it installed? How can
I get IE to recognize this cert?

Because IE doesn't think it's there it won't show up as an available
client cert when I try to connect to a site requiring client certs.

HELP!!!!

Thanks in advance,
Russ

 

[Steven L Umbach]

I don't know why their is a discrepancy, maybe it shows in the personal store but the
associated private key is not with it as would be shown on the first/general page
when viewing the certificate. You also need to import the Certificate Authority
certificate via a cer file into those computers so that they will trust the
certificate. I prefer using Web Enrollment for obtaining certificates for users that
are not part of an AD Domain. --- Steve

http://www.microsoft.com/windows2000/techinfo/planning/security/cawebsteps.asp --- Web
Enrollment info.