Symantec 14541094 User Guide - Page 211

Securing your computer and sessions 211 Using encryption to protect data To create a certificate file to send to another user 1 In Microsoft Internet Explorer, on the Tools menu, click Internet Options. 2 In the Internet Options window, on the Content tab, click Certificates. 3 Select your certificate, and then click Export. For more information, see the documentation for Microsoft Internet Explorer. Setting up a certificate store A certificate store is a secure database that contains one or more certificates for the users who are allowed to connect to your computer. These certificates ensure that only a user with the private key that is associated with the certificate can connect. The files should contain the digital certificate, but should not contain the private key. To locate the public key for a session, pcAnywhere searches the certificate store for the certificate that belongs to the remote user. Symantec pcAnywhere can use any of the following file formats as a certificate store: ■ Microsoft-compatible certificate store ■ PKCS#7 cryptographic message ■ Raw certificate obtained from the certificate authority To set up a certificate store 1 In the Symantec pcAnywhere window, in Advanced View, on the Edit menu, click Preferences. 2 In the pcAnywhere Options window, on the Encryption tab, type the path and name of the certificate files for any user who will connect to your computer. The user must provide you with this certificate file. See "Creating a certificate file to send to another user" on page 210. 3 Click OK. Locating certificates and private keys When the host is configured to run as a service, it is unable to use the private key data that Windows stores for individual users. You can use the MachKey program to locate and copy certificates and private keys from the current user's certificate store to the local computer's certificate store. MachKey is provided with pcAnywhere.