We setup PKI certificate monitoring MP. Most of the certificates are visible and are monitored but there are some client auth certs which are not getting discovered. I tried logging on to the servers where those certs are imported. And they are not visble to me either. 1. in cert mmc when i try to open with computer account - not visible. 2. in cert mmc when i try to open with my account - not visible. Seems these certificates are imported with a service account and are available in person\my store.. anyidea how can we get them discovered.Manish

Are you sure you have a certificate? The pki mp probably only checks the local computer (aka system account) certs and nothing else. Application that run under certain credentials may have a cert installed on that account to, typically the "run as" account of the service... But i think you need to write something yourself if that's really the case here (in hk_user under each userguid\Software\Microsoft\SystemCertificates is a "my" store that is probably what you need to check). Rob Korving http://jama00.wordpress.com/

HI Rob, I am sorry I am not able to get your question. I do see a certificate-- when i open MMC with that specific acc credentidials (ex domain\useracc1 )and add cert snapin under USER Account option. Otherwise that specific cert is not visible. As far as your second point, i checked that registry entry for the USER SID of account (domain\useraccount1) with which I am able to see the cert and did not found any certificates under it. thanks -m Manish

is there a way to discover all client certs irrespective of which user imported them.?Manish

of course, but like i said before you need to create something of your own.Rob Korving http://jama00.wordpress.com/

of course, but like i said before you need to create something of your own.Rob Korving http://jama00.wordpress.com/