Symantec 14541094 - pcAnywhere Host & Remote, Руководство пользователя

Страница: 211 / 313

To create a certificate file to send to another user
1 In Microsoft Internet Explorer, on the Tools menu, click Internet Options.
2
In the Internet Options window, on the Content tab, click Certificates.
3
Select your certificate, and then click Export.
For more information, see the documentation for Microsoft Internet Explorer.
Setting up a certificate store
A certificate store is a secure database that contains one or more certificates for
the users who are allowed to connect to your computer. These certificates ensure
that only a user with the private key that is associated with the certificate can
connect. The files should contain the digital certificate, but should not contain
the private key.
To locate the public key for a session, pcAnywhere searches the certificate store
for the certificate that belongs to the remote user.
Symantec pcAnywhere can use any of the following file formats as a certificate
store:
■
Microsoft-compatible certificate store
■
PKCS#7 cryptographic message
■
Raw certificate obtained from the certificate authority
To set up a certificate store
1
In the Symantec pcAnywhere window, in Advanced View, on the Edit menu,
click Preferences.
2
In the pcAnywhere Options window, on the Encryption tab, type the path and
name of the certificate files for any user who will connect to your computer.
The user must provide you with this certificate file.
See “Creating a certificate file to send to another user” on page 210.
3
Click OK.
Locating certificates and private keys
When the host is configured to run as a service, it is unable to use the private key
data that Windows stores for individual users. You can use the MachKey program
to locate and copy certificates and private keys from the current user's certificate
store to the local computer's certificate store. MachKey is provided with
pcAnywhere.
211 Securing your computer and sessions
Using encryption to protect data