Managing Certificates with MMC

You can use the Microsoft Management Console (MMC) to manage certificates on a Windows platform. For more information, see Microsoft Management Console Help.

Configuring MMC for Certificate Management

To configure MMC for certificate management:

1. From the Windows Start menu, select Run, and execute the mmc command to start the Microsoft Management Console.
2. Select File > Add/Remove Snap-in.
3. In the Add/Remove Snap-in dialog box, click Add.
4. In the Add Standalone Snap-in dialog box, select Certificates from the list and click Add.
5. In the Certificates snap-in dialog box, select Computer account and click Next.
   Important

   To manage certificates for client applications, select My user account.
6. In the Select Computer dialog box, select Local computer and click Finish.
7. In the Add Standalone Snap-in dialog box, click Close.
8. In the Add/Remove Snap-in dialog box, click OK.
   The Certificates item is added under Console Root on the left pane.

You can save the MMC configuration in a file by selecting File > Save As.

Exporting Certificates

If the computer that is running Genesys applications is different from the one on which you generated the certificate, you must first export the certificate and its private key, as follows:

1. From the Windows Start menu, select Run and execute the mmc command to start the Microsoft Management Console.
2. Open your saved console configuration, or select File > Add/Remove Snap-in.
3. In the Add/Remove Snap-in dialog box, click Add.
4. In the Add Standalone Snap-in dialog box, select Certificates from the list and click Add.
5. In the Certificates snap-in dialog box, select Computer account and click Next.
6. In the Select Computer dialog box, select Local computer and click Finish.
7. In the Add Standalone Snap-in dialog box, click Close.
8. In the Add/Remove Snap-in dialog box, click OK.
   The Certificates item is added under Console Root on the left pane.
9. On the right pane, right-click the certificate in the list. Select All Tasks > Export from the shortcut menu to start the Certificate Export Wizard.
10. On the first Wizard page, click Next.
11. On the next page, select Yes, export the private key, and click Next.
12. On the Export File Format page, the only available export file format will be PKCS #12. Click Next.
13. On the Password page, type and confirm your password. Click Next.
14. On the File to Export page, specify the path and file name for your certificate. Click Next.
15. Click Finish to complete the export procedure.

Obtaining Certificates from a Remote Computer

To obtain a certificate from a remote computer:

1. From the Windows Start menu, select Run, and execute the mmc command to start Microsoft Management Console.
2. Select File > Add/Remove Snap-in.
3. In the Add/Remove Snap-in dialog box, click Add.
4. In the Add Standalone Snap-in dialog box, select Certificates from the list. Click Add.
5. In the Certificates snap-in dialog box, select Computer account and click Next.
6. In the Select Computer dialog box, select Another computer and either type the name of the remote target computer or click Browse to search for it. Click Finish.
7. In the Add/Remove Snap-in dialog box, click OK.
   A new snap-in item is added under Console Root in the main snap-in console window.
   You can browse for examples of all the certificates on the target computer, or you can view information about a particular certificate. Depending on the options that you select, MMC also enables you to remotely manage certificates on a target computer.
8. On the left pane, select Certificates > Personal > Certificates.
9. On the right pane, double-click the certificate in the list.
10. In the Certificate dialog box, click the Details tab.
11. Select Thumbprint from the list. The value, consisting of a string of hexadecimal digits, appears in the lower part of the dialog box.
12. Use the string of hexadecimal digits for the security configuration.