[研究]CertUtil -key 憑證工具

[研究]CertUtil  -key 憑證工具 

2021-12-02

剛安裝完的 Windows Server 2022

Microsoft Windows [版本 10.0.20348.288] (c) Microsoft Corporation. 著作權所有，並保留一切權利。 C:\Users\Administrator>certutil -key CertUtil: -key 命令成功完成。 C:\Users\Administrator>

Windows Server 2022 + IIS + Visual Studio 2022 後

C:\>certutil -key Microsoft Strong Cryptographic Provider: NetFrameworkConfigurationKey d6d986f09a1ee04e24c949879fdb506c_04ccfaed-250b-4453-844a-6449729969f8 RSA AT_KEYEXCHANGE IIS Express Development Certificate Container fad662b360941f26a1193357aab3c12d_04ccfaed-250b-4453-844a-6449729969f8 RSA AT_KEYEXCHANGE CertUtil: -key 命令成功完成。 C:\>

下面，某台電腦

C:\Users\Administrator>CertUtil -key Microsoft Strong Cryptographic Provider: {8AABA733-29D9-4EC9-9563-F7317DD239DD} 2e3e6197f45d543587327b509e86f3e2_e6fb8ce9-4bce-440f-b68a-e10df11833c1 RSA AT_KEYEXCHANGE iisConfigurationKey 6de9cb26d2b98c01ec4e9e8b34824aa2_e6fb8ce9-4bce-440f-b68a-e10df11833c1 RSA AT_KEYEXCHANGE iisWasKey 76944fb33636aeddb9590521c2e8815a_e6fb8ce9-4bce-440f-b68a-e10df11833c1 RSA AT_KEYEXCHANGE MS IIS DCOM Server 7a436fe806e483969f48a894af2fe9a1_e6fb8ce9-4bce-440f-b68a-e10df11833c1 RSA AT_KEYEXCHANGE, AT_SIGNATURE Microsoft Internet Information Server c2319c42033a5ca7f44e731bfd3fa2b5_e6fb8ce9-4bce-440f-b68a-e10df11833c1 RSA AT_KEYEXCHANGE, AT_SIGNATURE VS_KEY_A86CC569E00D2E3E c75e376f71e50a54384bef3fa3b5e42e_e6fb8ce9-4bce-440f-b68a-e10df11833c1 RSA AT_SIGNATURE NetFrameworkConfigurationKey d6d986f09a1ee04e24c949879fdb506c_e6fb8ce9-4bce-440f-b68a-e10df11833c1 RSA AT_KEYEXCHANGE 7B6A2DA2-BBF8-D5EE-4744-6332EF2B4AE5 d721028c5ea45e21b558eb86d5f91157_e6fb8ce9-4bce-440f-b68a-e10df11833c1 RSA AT_KEYEXCHANGE IIS Express Development Certificate Container fad662b360941f26a1193357aab3c12d_e6fb8ce9-4bce-440f-b68a-e10df11833c1 RSA AT_KEYEXCHANGE CertUtil: -key 命令成功完成。 C:\Users\Administrator>

(完)

相關

用來建立、查看及管理憑證的工具 - MakeCert , Cert2spc.exe , Certmgr.msc , Certutil.exe
https://docs.microsoft.com/zh-tw/windows/win32/seccrypto/tools-to-create-view-and-manage-certificates

Certutil | Microsoft Docs
https://docs.microsoft.com/zh-tw/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/cc732443(v=ws.11)

c# - Listing users with access to NetFrameworkConfigurationKey ACL - Stack Overflow
https://stackoverflow.com/questions/9528681/listing-users-with-access-to-netframeworkconfigurationkey-acl/33108799

Using Encryption to Protect Passwords | Microsoft Docs
https://docs.microsoft.com/en-us/iis/manage/configuring-security/using-encryption-to-protect-passwords
iisWasKey看來是為了加密Application Pool密碼

ASP.NET IIS 註冊工具 (Aspnet_regiis.exe) | Microsoft Docs
https://docs.microsoft.com/zh-tw/previous-versions/dotnet/netframework-1.1/k6h9cz8h(v=vs.80)?redirectedfrom=MSDN

Specifying a Protected Configuration Provider | Microsoft Docs
https://docs.microsoft.com/en-us/previous-versions/aspnet/68ze1hb2(v=vs.100)