We are using Geneva Framework Beta 2 to implement SSO. We want to provide a portal that allows user to upload their certificate and the ASP.NET portal will impersonate the request and install the certificate to certification store.

Is that possible to impersonate ASP.NET as a user that belongs to "Power Users" group to install certificate to certification store by using the code as shown below? My testing failed with the following approach but i may have missed out something?

//Create new X509 store called teststore from the local certificate store.
X509Store store = new X509Store(StoreName.My, StoreLocation.LocalMachine);

store.Open(OpenFlags.MaxAllowed);
X509Certificate2 certificate = new X509Certificate2();

X509Certificate2 certificate1 = new X509Certificate2("c:\\temp\\localhost.cer");
store.Add(certificate1);

You need administrative privileges to do that - e.g. run the appool as SYSTEM (not recommended generally)

---

Dominick Baier | thinktecture | http://www.leastprivilege.com

HiDominick Baier

Yes thats the case.

---

Dominick Baier | thinktecture | http://www.leastprivilege.com