User Profile
AndreaGiacomin
Copper Contributor
Joined 6 years ago
User Widgets
Recent Discussions
Same RSA certificate in local store and smart card
Hi, On Windows 10 I noticed this strange behavior with certificate management: an RSA certificate, and the relative private key, is locally stored in the machine. If the private key is copied and imported in a smart card, the certificate in the local store is overwritten and marked as "smart card certificate". When a certificate is locally available this is the selector: When I connect the smart card with the same certificate, the selector change: And now the local certificate became inaccesible, even if the smart card is disconnected. Is this behavior by desing? Preventing the private key from being locally accessible if it is present on smart card?Windows 10/11 Certificate priority Local Store/Smart Card
Hi, I'm using a S/MIME certificates that is installed in the Certificate Local Store (with the private key), the same certificates is installed in a YubiKey. When the YubiKey is unplugged the certificate is correctly used by the applications. The moment I connect the YubiKey to the PC, Windows detect that the certificate in the local store is present in a smart card and mark it as a smart card certificate. The private key located in the local store is then bypassed, and every time I need to sign a message I need to connect the YubiKey Is there a way to configure Windows to use the certificate present on the local store, even if a smart key with the same certificate is present?Re: Applying S/MIME sign/encryption based on email rules
Hi, you're referring to OME (Office Message Encryption). This is server-side encryption. My question is about S/MIME, this is end to end encryption. Where the sender need to use his digital certificate, stored on the computer or in a smart card, to sign the message. This operation need to be done on client side, not server side.Cannot invite to meeting user with organization domain
Hi, we are trying Microsoft 365 features in our organization, so we created and licensed 5 users. Our organization doamin is validated against Micrososft services. In this scenario, the 5 demo users cannot invite the other members of the organzation (the users that are not part of the demo). Inviting third party domain users present no issues. Is there a way to bypass this behaviour?
