Hi.

i'm playing around with EFS.
I have a windows nt service running as "SYSTEM".
Encrypting files, encryptes the files with a certificate named as
"COMPUTERNAME$(COMPUTERNAME$@DOMAIN)"

Now, i added a EFS enabled certificate using CertOpenStore and
CertAddCertificateContextToStore to the SERVICENAME\MY store (when i
open the registry at
HKLM\Software\Microsoft\Cryptography\Services\SERVICENAME\SystemCertificates\MY
i see the just added certificate)

but still, when i use file encryption, the service still uses the
"COMPUTERNAME$(COMPUTERNAME$@DOMAIN)" certificate, not the one i added
to the service store.

Does anybody know, if it is possible to associate a certificate to a nt
service so it is used when doing EFS?

Thanks. Regards,
Sascha Kiefer