CertificateSource

Available from version	1.28.0
Necessity	optional
Usage	/CertificateSource <value>

Description

This parameter specifies where the IBI-aws Client should look for the certificates to decrypt the message file.

The following values are allowed:

Value	Description	Default
`[LocalMachine]\My`	The client certificates are searched for in the "Personal" certificate store of the current computer. After installing the IBI-aws certificate pair in the `[LocalMachine]` area, all user accounts of the computer (e.g. all domain users) need a read permission to the private key of the client certificate.	✅
`[LocalMachine]\<Certificate store>`	The client certificates are searched in the specified certificate store of the current computer. After installing the IBI-aws certificate pair in the `[LocalMachine]` area, all user accounts of the computer (e.g. all domain users) need a read permission to the private key of the client certificate.
`[CurrentUser]\My`	The client certificates are searched in the certificate store "Personal" of the current user.
`[CurrentUser]\<Certificate store>`	The client certificates are searched in the specified certificate store of the current user.
`<Path to directory>`	The client certificates are searched for in the specified directory. The path can be specified absolute or relative to the directory of the IBI-aws Client.

Determine the certificate store name

To get a list of all available certificate stores of the current computer or user, the following Powershell commands can be used.

LocalMachine

Powershell - LocalMachine

POWERSHELL

cd cert:
cd LocalMachine
ls

The appropriate name can then be selected from the list of certificate stores that then appears. E.g. [LocalMachine]\My

CurrentUser

Powershell - CurrentUser

POWERSHELL

cd cert:
cd CurrentUser
ls

The appropriate name can then be selected from the list of certificate stores that then appears. E.g. [CurrentUser]\My

Examples

IBI.aws.Client.exe /CertificateSource "[LocalMachine]\MY"
The default behavior of the IBI-aws Client is explicitly specified. Here, the certificates required for decrypting the message file are searched for in the "Personal" certificate store of the current computer.

IBI.aws.Client.exe /CertificateSource "[CurrentUser]\MY"
The certificates required for decrypting the message file are searched for in the "Personal" certificate store of the current user.

IBI.aws.Client.exe /CertificateSource "[LocalMachine]\CA"
The certificates required for decrypting the message file are searched for in the "Trusted Root Certification Authorities" certificate store of the current computer.

IBI.aws.Client.exe /CertificateSource "C:\Certificates"
The certificates required for decrypting the message file are searched for in the directory C:\Certificates.

IBI.aws.Client.exe /CertificateSource ""
The certificates required for decrypting the message file are searched for in the directory of the IBI-aws Client.