Possible to access LocalMachine cetificates in MY store using SunMSCAPI?

Question

Is there an Oracle reference somewhere that clearly states that you cannot access the LocalMachine certificates in the MY store using the SunMSCAPI provider?

Thanks, Bert

score 0 · Answer 1 · answered Nov 18 '15 at 19:04

0

Without knowing more about your particular error, there is a bug reported here

answered Nov 18 '15 at 19:04

TMichel

4,336
9
44
67

Thank you for that link, but it doesn't mention LocalMachine. – Quadmore Nov 18 '15 at 19:27

score 0 · Accepted Answer · answered Jul 22 '16 at 19:27

We proved this by using the free Microsoft/Sysinternals tool PSExec.exe.

By running the same Java program as either a regular user or a system user, we could determine the regular user could not obtain the LocalMachine certificate.

The command:

PsExec.exe -i -s cmd.exe

Then run the Java program in a console the regular way with java.exe. You can display the current user in the Java code with getEnv("USERNAME").

Interestingly, a system account cannot access a current user's registry setting from Java either.

Possible to access LocalMachine cetificates in MY store using SunMSCAPI?

2 Answers2

Linked