You can modify the properties of a certificate for a number of reasons:
- Adding or modifying a display name to help
differentiate it from other similar certificates.
- Changing the purpose of the certificate by
adding or disabling purposes.
- Specifying cross-certificate download
Users or local Administrators is the minimum group membership required to complete this procedure. Review the details in "Additional considerations" in this topic.
|To modify the properties of a certificate|
Open the Certificates snap-in for a user, computer, or service.
In the console tree under the logical store that contains the certificate to modify, click Certificates.
In the details pane, click the certificate that you want to modify.
On the Action menu, click Properties.
Make the desired changes:
- To change the display name of the certificate, in Friendly
name, type the new name.
- To change the description of the certificate, in
Description, type the new description.
- To enable all available purposes for the certificate, in
Certificate purposes, click Enable all purposes for this
- To disable all available purposes for the certificate, in
Certificate purposes, click Disable all purposes for this
- To designate specific purposes for the certificate, in
Certificate purposes, click Enable only the following
purposes, and select the appropriate check boxes.
- To modify cross-certificate properties, click the
Cross-Certificates tab, click Specify additional
Cross-Certificate download locations, enter the URL where the
cross-certificates can be obtained, and click Add URL.
- Click OK to accept all changes.
- To change the display name of the certificate, in Friendly name, type the new name.
- User certificates can be managed by the user
or by an administrator. Certificates issued to a computer or
service can only be managed by an administrator.
- To open the Certificates snap-in, see
Certificates Snap-in to an MMC.