Using Permissions.au3 with a certificate?

[DrLarch 2]

Curious if anyone knows if the permissions UDF can be used with certificates and if so, how.

This is the code in the UDF for $_SE_OBJECT_TYPE which doesn't state anything about certs and not sure if it would fall under one of the object types listed:

Global Enum _ ;$_SE_OBJECT_TYPE
        $SE_UNKNOWN_OBJECT_TYPE = 0, _ ;Unknown object type.
        $SE_FILE_OBJECT, _ ;Indicates a file or directory. Can be an absolute path, such as FileName.dat, C:\DirectoryName\FileName.dat, or a handle to an opened file
        $SE_SERVICE, _;Indicates a Windows service. A service object can be a local service, such as ServiceName, or a remote service, such as \\ComputerName\ServiceName, or a handle to a service
        $SE_PRINTER, _;Indicates a printer. A printer object can be a local printer, such as PrinterName, or a remote printer, such as \\ComputerName\PrinterName.
        $SE_REGISTRY_KEY, _;Indicates a registry key. The names can be in the format 'HKLM\SOFTWARE\Example', or 'HKEY_LOCAL_MACHINE\SOFTWARE\Example'. It can also be a handle to a registry key
        $SE_LMSHARE, _;Indicates a network share. A share object can be local, such as ShareName, or remote, such as \\ComputerName\ShareName.
        $SE_KERNEL_OBJECT, _;Indicates a local kernel object. All types of kernel objects are supported. ie, A process handle obtained with _Permissions_OpenProcess
        $SE_WINDOW_OBJECT, _;Indicates a window station or desktop object on the local computer.
        $SE_DS_OBJECT, _;Indicates a directory service object or a property set or property of a directory service object. e.g.CN=SomeObject,OU=ou2,OU=ou1,DC=DomainName,DC=CompanyName,DC=com,O=internet
        $SE_DS_OBJECT_ALL, _;Indicates a directory service object and all of its property sets and properties.
        $SE_PROVIDER_DEFINED_OBJECT, _;Indicates a provider-defined object.
        $SE_WMIGUID_OBJECT, _;Indicates a WMI object.
        $SE_REGISTRY_WOW64_32KEY;Indicates an object for a registry entry under WOW64.
;$_SE_OBJECT_TYPE

What I'm trying to do is add another user to a cert in Certificates (Local  Computer) > Personal > Certificates as if using the "manage private keys" command via the MMC.

Thanks...

[jguinch 461]

What about using certutil.exe ?

[DrLarch 2]

Thanks jguinch, yeah I can go that route. Was wondering if the permissions UDF would be able to handle it, but if not I'll deal with it that way.

Thanks