CertificateSource

Description

This parameter specifies where the IBI-aws Client should look for the certificates to decrypt the message file.

The following values are allowed:

Value	Description	Default
[LocalMachine]\My	The client certificates are searched for in the "Personal" certificate store of the current computer. After installing the IBI-aws certificate pair in the [LocalMachine] area, all user accounts of the computer (e.g. all domain users) need a read permission to the private key of the client certificate.
[LocalMachine]\<Certificate store>	The client certificates are searched in the specified certificate store of the current computer. After installing the IBI-aws certificate pair in the [LocalMachine] area, all user accounts of the computer (e.g. all domain users) need a read permission to the private key of the client certificate.
[CurrentUser]\My	The client certificates are searched in the certificate store "Personal" of the current user.
[CurrentUser]\<Certificate store>	The client certificates are searched in the specified certificate store of the current user.
<Path to directory>	The client certificates are searched for in the specified directory. The path can be specified absolute or relative to the directory of the IBI-aws Client.

Determine the certificate store name

To get a list of all available certificate stores of the current computer or user, the following Powershell commands can be used.

LocalMachine

cd cert:
cd LocalMachine
ls

The appropriate name can then be selected from the list of certificate stores that then appears. E.g. [LocalMachine]\My

CurrentUser

cd cert:
cd CurrentUser
ls

The appropriate name can then be selected from the list of certificate stores that then appears. E.g. [CurrentUser]\My

Examples

IBI.aws.Client.exe /CertificateSource "[LocalMachine]\MY"
The default behavior of the IBI-aws Client is explicitly specified. Here, the certificates required for decrypting the message file are searched for in the "Personal" certificate store of the current computer.

IBI.aws.Client.exe /CertificateSource "[CurrentUser]\MY"
The certificates required for decrypting the message file are searched for in the "Personal" certificate store of the current user.

IBI.aws.Client.exe /CertificateSource "[LocalMachine]\CA"
The certificates required for decrypting the message file are searched for in the "Trusted Root Certification Authorities" certificate store of the current computer.

IBI.aws.Client.exe /CertificateSource "C:\Certificates"
The certificates required for decrypting the message file are searched for in the directory C:\Certificates.

IBI.aws.Client.exe /CertificateSource ""
The certificates required for decrypting the message file are searched for in the directory of the IBI-aws Client.