X.509 Certificates

With the new functionality provided by sql server 2005, can we use the certificate functionality to act as a db store for third party certificates. Posts that I have seen so far indicate that there is no direct access to the certificate store once a certificate has been imported to the db. Given that the database is more portable (for failover purposes for certificate storeage, lack of access to the certificate store should be considered a considerable problem for ISV's.

Failing that, if we need to impliment this functionality ourselves what is the best format to store certificates in the database (blob or other)

thanks

Mike



Answer this question

X.509 Certificates

  • KombatNT

    How exactly do you intend to use the certificates What is the functionality that you want to implement.

    SQL Server 2005 allows you to use certificates for encryption and for special database code authorization through database code signing.

    Thanks
    Laurentiu



  • Fluffy_ko

    Most certificate information can be retrieved by examining the sys.certificates catalog. If you need to recover the certificate in the form of a .cer file, you need to export it to a file.

    For additional information on sys.certificates, see http://msdn2.microsoft.com/en-US/library/ms189774.aspx.

    There is no new datatype for certificates.

    Thanks
    Laurentiu



  • mrwise

    You can certainly do this.

    Thanks
    Laurentiu



  • r-droll

    According to the documentation the certificate contents are opaque and not visible once added as a certificate and in order to work with it, the certificate needs to be imported back to a file.

    How is the certificate stored internally As a blob or is there a new datatype for certificate


  • MartinMSJ

    the database is would only be a data store for the certificates themselves. external applications would use them for client server authentication activities (external to the database)
  • X.509 Certificates