An application is requesting access to a protected item-CryptoAPI Private Key popup

Question

Hi ,

I am running a sample app using RTC API  to send IM to the selected client.
I have attached the certificate to the Connection manager.
When i run this application in Windows 2003 Server machine.
On  "_SipEndpoint.Register();"  i am getting the below popup

"An application is requesting access to a protected item"
"CryptoAPI Private Key "
with OK CANCEL buttons.

Once i click OK its allowing to establish connection and send message properly.

Could any one help me on this "How to suppress this programatically" without changing any Local policy Settings in the server?

Thanks in Advance,
Raj

Answer 1

Hi ,

I am running a sample app using RTC API  to send IM to the selected client.
I have attached the certificate to the Connection manager.
When i run this application in Windows 2003 Server machine.

Could any one help me on this "How to suppress this programatically" without changing any Local policy Settings in the server?

Thanks in Advance,
Raj

I want to make sure the following two points:First, which sample app are you running? Second, would you please explain how to suppress this programmatically?

Answer 2

This is probably happening because your application needs to have Read and Execute permission for the file on disk that contains the private key data for the certificate that you are using for the connection.

 

There is a nice post on this issue here:  http://www.leastprivilege.com/HowToGetToThePrivateKeyFileFromACertificate.aspx

Read that and see if setting the ACL on the key file solves your problem.

---

Oscar Newkerk Consultant Oscarnew Consulting

Answer 3

Raj, are this app using some kind of certificate?

This could happen when you exported/imported a cert that have the "Enable strong protection" option checked. Try to repeat the export/import process without this option checked.

Also, be sure to

a) Have the private key as exportable when you make the export/import process

b) Grant permissions to the desired user over this key.

You can use the WinHttpCertCfg.exe tool (http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=19801)

WinHttpCertCfg.exe -g -a "DOMAIN\User" -c LOCAL_MACHINE\My -s "IssuedTo"

You may also want to try

WinHttpCertCfg.exe -g -a "DOMAIN\User" -c CURRENT_USER\My -s "IssuedTo"

if the cert is located at user store

User can be local or a domain one.

Hope this helps.

Cheers.