deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 13:27:23 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity
windows-itpro-docs/windows/configuration/wcd/wcd-certificates.md
Siddarth Mandalika 4b69415e9a cherry-picking
2022-08-05 18:51:36 +05:30

3.5 KiB
Raw Blame History

title, description, ms.prod, author, ms.localizationpriority, ms.author, ms.topic, ms.date, ms.reviewer, manager
title description ms.prod author ms.localizationpriority ms.author ms.topic ms.date ms.reviewer manager
Certificates (Windows 10) This section describes the Certificates settings that you can configure in provisioning packages for Windows 10 using Windows Configuration Designer. w10 aczechowski medium aaroncz article 09/06/2017 dougeby

Certificates (Windows Configuration Designer reference)

Use to deploy Root Certificate Authority (CA) certificates to devices. The following list describes the purpose of each setting group.

  • In CACertificates, you specify a certificate that will be added to the Intermediate CA store on the target device.
  • In ClientCertificates, you specify a certificate that will be added to the Personal store on the target device, and provide (password, keylocation), (and configure whether the certificate can be exported).
  • In RootCertificates, you specify a certificate that will be added to the Trusted Root CA store on the target device.
  • In TrustedPeopleCertificates, you specify a certificate that will be added to the Trusted People store on the target device.
  • In TrustedProvisioners, you specify a certificate that allows devices to automatically trust packages from the specified publisher.

Applies to

Setting groups Windows client Surface Hub HoloLens IoT Core
All setting groups ✔️ ✔️ ✔️ ✔️

CACertificates

  1. In Available customizations, select CACertificates, enter a friendly name for the certificate, and then click Add.
  2. In Available customizations, select the name that you created.
  3. In CertificatePath, browse to or enter the path to the certificate.

ClientCertificates

  1. In Available customizations, select ClientCertificates, enter a friendly name for the certificate, and then click Add.
  2. In Available customizations, select the name that you created. The following table describes the settings you can configure. Settings in bold are required.
Setting Value Description
CertificatePassword
CertificatePath Adds the selected certificate to the Personal store on the target device.
ExportCertificate True or false Set to True to allow certificate export.
KeyLocation - TPM only
- TPM with software fallback
- Software only

RootCertificates

  1. In Available customizations, select RootCertificates, enter a friendly name for the certificate, and then click Add.
  2. In Available customizations, select the name that you created.
  3. In CertificatePath, browse to or enter the path to the certificate.

TrustedPeopleCertificates

  1. In Available customizations, select TrustedPeopleCertificates, enter a friendly name for the certificate, and then click Add.
  2. In Available customizations, select the name that you created.
  3. In TrustedCertificate, browse to or enter the path to the certificate.

TrustedProvisioners

  1. In Available customizations, select TrustedPprovisioners, enter a CertificateHash, and then click Add.
  2. In Available customizations, select the name that you created.
  3. In TrustedProvisioner, browse to or enter the path to the certificate.

Related topics