How do I give someone access to my certificate?

Individuals who have attained Singapore Workforce Skills Qualifications (WSQ) electronic certificates (e-Certs) can access their e-Certs records on MySkillsFuture. This topic addresses the features and commonly asked questions about WSQ e-Certs.

Instead of changing the role of a user with limited access, grant the user access to a specific order or issued certificate.

Note

The user in a "limited" role can only see certificates they have ordered. To allow a "restricted" admin, manager, financial manager, or standard user to manage the order, you can add them to the division (see 1.1 Unrestricted versus restricted).

Grant a Limited user access to a certificate order

While the certificate order is active, you can add users.

  1. In your CertCentral account, in the sidebar menu, click Certificates > Orders.

  2. On the Orders page, use the dropdown lists, search box, column headers, and advanced search features to find the order to which you need to grant the limited user access.

  3. In the Order # column, select the Quick View link of the certificate order to which you want to add additional user access.

  4. In the Order # details pane, in the Order Details section under User Access, select Grant Additional Access.

  5. In the dropdown list, select the limited users to whom you want to grant certificate order access.

  6. Select Save.

Grant a Limited user access to a certificate request (pending order)

You can only add users while the certificate request is pending.

Once the order has been issued, the limited user will have permission to access the certificate order, allowing them to download certificates, renew certificates, and perform other certificate-related actions.

I put the certificate in root instead of the personal, because, sincerely, I don't know exactly the certificate I am going to use should go. The certificate is going to be issued by a CA so the certificate owner company can sign with it.

I am using local administrator user, but when I  try the solution in the link you posted, when I do right-click on certificate and go to AllTask ->, the option Manage Private Keys, doesn't appear to me. I don't know why, may be a O.S. difference, I mean, I posted this question in this forum because I thought it was the correct one (I am new to these forums, and I was recommended to post this kind of questions here), but I am not so sure now. This problem I am having is using O.S. Windows XP.

Anyway I have found a solution to the mess I made. In the las post I did I said "But when I try to access the certificate with "Network Service" user (with a program I made), I am getting an error ("Failed to acquire key context") with a component I use, and I think that is a user permission error." Ok, I have realized that it is wrong. The user which my web application was not using "Network Service", it was using "ASPNET". So executed:

winhttpcertcfg -g -c LOCAL_MACHINE\Root -s "SecureBlackBox Deom Certificate" -a "ASPNET"

And afterwards I tried again to access to the certificate and also tried to use its private key with my web application and it works well.

To start with this exercise you need to first create certificate and certificate revocation list, if not yet created refer to previous post.

Previous Step Link- How to create a root CA and a private key file by using the makecert.exe utility

Previous Step Link- How to create certificate revocation list for the root certification authority

Previous Step Link- How to create and install a test certificate for the Microsoft Dynamics NAV Server computer

Let’s start with this exercise:

  • In the left pane of MMC, expand the Certificates (Local Computer) node, expand the Personal node, and then select the Certificates subfolder.
  • In the right pane, right-click the NavServiceCert certificate, choose All Tasks, and then choose Manage Private Keys.
  • In the Permissions for NavServiceCert private keys dialog box, choose Add.

In the Select Users, Computers, Service Accounts, or Groups dialog box, enter the name of the service account that is used by Microsoft Dynamics NAV Server By default, the service account is NETWORK SERVICE. Choose OK when done.

How do I give someone access to my certificate?

Security Note

In a production environment, you run Microsoft Dynamics NAV Server under a dedicated domain user account instead of the less secure NETWORK SERVICE account. Because this is a test implementation, the NETWORK SERVICE account is acceptable.