documentation problem for WinHttpCertCfg.exe

documentation problem for WinHttpCertCfg.exe

am 12.09.2007 19:50:59 von Jason Viers

The documentation about specifying an account for WinHttpCertCfg.exe[1]
is misleading/incorrect (depends on interpretation). It says:

-----------------
-a Specifies the user account on the machine being configured. This
could be a local machine or domain account, such as "IWAM_TESTMACHINE",
"TESTUSER", or "TESTDOMAIN\DOMAINUSER".
--------------

In the version of WinHttpCertCfg.exe included in the "Windows Server
2003 Resource Kit Tools"[2], the syntax for specifying a domain account
is not "TESTDOMAIN\DOMAINUSER", but "DOMAINUSER@TESTDOMAIN".

It looks like this might have been changed, as the individual
WinHttpCertCfg.exe download page[3] says

----------------
This update addresses the following issue:
* Users with administrative privileges were unable to grant access
to private key of client certificate for domain accounts
------------------


IMHO the documentation should be updated to acknowledge that multiple
versions of the syntax exist, or it should at LEAST say that there's
been an update to the tool and the syntax listed might not work. The
only reason I discovered the old syntax was a newsgroup post from Apr
2003 about the problem.

Thanks
Jason

[1] http://msdn2.microsoft.com/en-us/library/aa384088.aspx
[2] http://go.microsoft.com/fwlink/?linkid=84566
[3]
https://www.microsoft.com/downloads/details.aspx?familyid=c4 2e27ac-3409-40e9-8667-c748e422833f&displaylang=en