You can modify the properties of a certificate for a number of reasons:
- Adding or modifying a display name to help
differentiate it from other similar certificates.
- Changing the purpose of the certificate by
adding or disabling purposes.
- Specifying cross-certificate download
locations.
Users or local Administrators is the minimum group membership required to complete this procedure. Review the details in "Additional considerations" in this topic.
![]() |
To modify the properties of a certificate |
-
Open the Certificates snap-in for a user, computer, or service.
-
In the console tree under the logical store that contains the certificate to modify, click Certificates.
-
In the details pane, click the certificate that you want to modify.
-
On the Action menu, click Properties.
-
Make the desired changes:
- To change the display name of the certificate, in Friendly
name, type the new name.
- To change the description of the certificate, in
Description, type the new description.
- To enable all available purposes for the certificate, in
Certificate purposes, click Enable all purposes for this
certificate.
- To disable all available purposes for the certificate, in
Certificate purposes, click Disable all purposes for this
certificate.
- To designate specific purposes for the certificate, in
Certificate purposes, click Enable only the following
purposes, and select the appropriate check boxes.
- To modify cross-certificate properties, click the
Cross-Certificates tab, click Specify additional
Cross-Certificate download locations, enter the URL where the
cross-certificates can be obtained, and click Add URL.
- Click OK to accept all changes.
- To change the display name of the certificate, in Friendly
name, type the new name.
Additional considerations
- User certificates can be managed by the user
or by an administrator. Certificates issued to a computer or
service can only be managed by an administrator.
- To open the Certificates snap-in, see
Add the
Certificates Snap-in to an MMC.