Auto Update Ceritificates

[apeo]

Does anyone have a script or something i can look at that will detect what certificates the clients machine has and match it with the certificate they should have.. then give them the option to install the certificate. We recently updated our ssl certificates and i would like an automated function to detect those who havent installed the certificate then give them the option to install. I know how to give them the option to install but not how to check client machine if certificate is installed.

[Geoff]

Um... why arn't you distributing your certificates with Active Directory?

[apeo]

Because these clients are not in active directory.. its their home computers

 

I should have mentioned that in my earlier post. :oops:

[Geoff]

ok, so what are you using these certificates for?

[apeo]

ssl connections to our exchange server.

[alan-d]

Basically what apeo is doing is replacing the certificates originally issued by the LEA with our own certificates (The reason why is long and complicated but it's being done with LEA approval). The certificates are to allow secure access to Home Directories etc via a portal.

 

He is looking for something that will check to see if the old certificate originally issued from the LEA is installed and if found replace it with our certificate.

 

If this is not possible it will mean issueing instructions to everyone on how to install the new certificates - that was bad enough the first time round.

[Geoff]

You will have to manually issue instructions.

 

You might want to consider buying certificates from a real Certificate Authority. They have procedures for expiring certificates in situations like this. Plus your client machines will already have the root CA certificates for any real CA.

[apeo]

Yeah I have manual instructions and have thought of a means to inform the users. I was just checking if anyone here know how to automatically check the client certificates, Im pretty certain you can do this in javascript but i just dont know how.

[Geoff]

Only in IE.