USMT and email certificates

[Guest]

Is there a way to get (or does it already) USMT 2.6 to migrate email
certificates during a Windows 2000 Pro to XP Pro migration?

 

[Michael Niehaus [MS]]

USMT can back up and restore certificates, but you need to build an INF file
to tell it to. Here's the file that I used the last time I tried this:

--- Snip ---
[Version]

Signature=$Windows NT$

DriverVer=10/01/2002,5.2.3790.1265



[Copy This User State]

AddCertificates=mycertlist

ForceDestCert=mycertlist



[mycertlist]

"My",*

"AuthRoot",*

"AddressBook",*

"Trust",*

"CA",*

"UserDS",*

"TrustedPublisher",*

"Disallowed",*

"Root",*

"TrustedPeople",*

"Request",*


--- Snip ---

If you run Scanstate with the "/compress-" switch, you can see the backed-up
certificates in the "migrate.inf" (just to prove that it does find and
extract them - you wouldn't normally use /compress-); all of these should be
restored by Loadstate.

-Michael Niehaus
Systems Design Engineer
(e-mail address removed)
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Guest]

That sounds great. Will try it today. Just to be sure I have this right, I
create a new inf file (migcert.inf for example) using your code and call it
with the /i:migcert.inf switch?

Thanks for your help!

USMT can back up and restore certificates, but you need to build an INF file
to tell it to. Here's the file that I used the last time I tried this:

--- Snip ---
[Version]

Signature=$Windows NT$

DriverVer=10/01/2002,5.2.3790.1265



[Copy This User State]

AddCertificates=mycertlist

ForceDestCert=mycertlist



[mycertlist]

"My",*

"AuthRoot",*

"AddressBook",*

"Trust",*

"CA",*

"UserDS",*

"TrustedPublisher",*

"Disallowed",*

"Root",*

"TrustedPeople",*

"Request",*


--- Snip ---

If you run Scanstate with the "/compress-" switch, you can see the backed-up
certificates in the "migrate.inf" (just to prove that it does find and
extract them - you wouldn't normally use /compress-); all of these should be
restored by Loadstate.

-Michael Niehaus
Systems Design Engineer
(e-mail address removed)
This posting is provided "AS IS" with no warranties, and confers no rights.

Is there a way to get (or does it already) USMT 2.6 to migrate email
certificates during a Windows 2000 Pro to XP Pro migration?

 

[Michael Niehaus [MS]]

Yes, correct.

-Michael Niehaus
Systems Design Engineer
(e-mail address removed)
This posting is provided "AS IS" with no warranties, and confers no rights.

That sounds great. Will try it today. Just to be sure I have this right,
I
create a new inf file (migcert.inf for example) using your code and call
it
with the /i:migcert.inf switch?

Thanks for your help!

USMT can back up and restore certificates, but you need to build an INF
file
to tell it to. Here's the file that I used the last time I tried this:

--- Snip ---
[Version]

Signature=$Windows NT$

DriverVer=10/01/2002,5.2.3790.1265



[Copy This User State]

AddCertificates=mycertlist

ForceDestCert=mycertlist



[mycertlist]

"My",*

"AuthRoot",*

"AddressBook",*

"Trust",*

"CA",*

"UserDS",*

"TrustedPublisher",*

"Disallowed",*

"Root",*

"TrustedPeople",*

"Request",*


--- Snip ---

If you run Scanstate with the "/compress-" switch, you can see the
backed-up
certificates in the "migrate.inf" (just to prove that it does find and
extract them - you wouldn't normally use /compress-); all of these should
be
restored by Loadstate.

-Michael Niehaus
Systems Design Engineer
(e-mail address removed)
This posting is provided "AS IS" with no warranties, and confers no
rights.

Is there a way to get (or does it already) USMT 2.6 to migrate email
certificates during a Windows 2000 Pro to XP Pro migration?