is it possible to copy an already installed certificate?

is it possible to copy an already installed certificate?

• thechristopher

  Well is there any other means to extract the certificate from the privileged or spc store without code or anything. Can people just go to a special directory and copy the certificate or something like like
  
  

• Ed Warren

  So there's no way to make a replica of a certificate
  
  

• LastBoyScout

  Not from within the device.

  Manav

  
  
  

• Pramod Gujjar

  Generally speaking: code that runs privileged ('full trusted') can do anything - this includes the ability to add/copy certificates to the certificate stores.
  If a 'hacker' manages to run code in privileged execution mode on your device, he could be doing this.

  You'll have to come up with an appropriate device security configuration to prevent this (Details see here).

  
  
  

• daimaku

  You can delete the certificate from the store but can not extract it. You can however read the certificate but not copy or tamper with it.

  Manav

  
  
  

• MichaelJHuman

  I mean I would like to know if it's possible to replicate completely a certificate in one of the device store I'm just affraid that hackers may be able to do that to run their programs on our devices or using our program on their device.
  
  

• Marcel82

  Hi

  If you mean my 'copy' to read a certificate from one of the stores - then the answer is yes..
  Use the CertificateStore CSP to query the store (use RapiConfig.exe or the DMProcessConfigXML API).

  Is this what you where looking for

  
  
  
• is it possible to copy an already installed certificate?