kenneth sims)éçzørŠkŠç.²è¨žé¢rº,¡û\¢

I want to associate some PKI certificates with some newly created contacts I
imported into Active Directory. When I click on the properties of the
contact I do not see a tab for Digital ID or Published Certificates, but if I
click on Start > Search > Find People in Active Directory and then look at
the properties of a contact I have a tab for Digital ID for the respective
contacts. However the option to import certificate is grayed out. I checked
MSDN to see what attributes were available for Contacts and it indicates
X.509 and User-Cert are available attiributes. What am I missing? Can you
associate a cert with a contact? I'm using an account with Enterprise
rights.

joe kaplan

I have no idea how to set this via the various admin GUI tools. I do know
you can set these programmatically by loading the binary data in the X509
cert into the userCertificate attribute. I have no idea if you would want
to attempt to do this via an LDIF script or some other type of program.

Perhaps someone will know of a UI tool that exposes a friendlier way to do
this.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--

kenneth sims)éçzØrŠkŠÇ.²È¨žÉ¢rº,¡û\¢

I don't think I would want to use LDIF. Does anyone know how you might
associate a PKI cert with a contact? Seems to me that if the Digital ID tab
is available I should be able to use the import option but all the options
are grayed out on the Digital ID tab for contacts.