Windows 10: How to change the Default order among Multiple Client Certificates.

Our organization's smart cards policy contain several client certificates, however, the default certificate (Signature) is rarely the certificate that is needed, which is usually the Authentication one. Is there any way that a user can change or select the default certificate which would save several additional & annoying clicks multiple times per day? FWIW, prior to having a new motherboard installed a couple of months back, the Authentication cert was the default one, so this has been a recent change.


The certs were all created on the same day, and all share the same creation & expiration dates.


Any assistance w/b greatly appreciated, thank you.

:)

 

Client authentication with certificate, certificate order list or default certificate

For developing purposes, I've several certificates in my current user's personal store. So when I have to authenticate with a certificate, ie. on my VPN client, Windows propose me to chose in my certificates list:

Certificates list screenshot

My "problem" is simple: actually, Windows displays the certificates in a "last installed certificate, first in the list" way. So he proposes me the blue one by default, but I would like to have the red one at the top (because it's my personal one, the other ones I only use them programmatically). Note: I'm in a professional context, I really can't make the trick to uninstall/reinstall my personal certificate, it could have too much side effects

So is it possible to change the certificate proposed by default by Windows? Or is this possible to change the display order?

Thanks.

 

Certificate Templates on the client side

Hi,

Good day to you all! I hope this is the right place to ask this.

I have a few questions related to how certificate templates are being stored and distributed under AD CS:

• How do the clients get a list of applicable certificate templates from the enterprise CA, which is shown at the time when a new manual certificate enrollment is performed (e.g., someone goes to certmgr and request for a new certificate)?
• How are certificate templates being stored on both the CA side and the client side? Is there a directory that the templates reside in? Or are they just a collection of Windows registries (e.g. Software\Microsoft\Cryptography\CertificateTemplateCache
  under HKCU and HKLM)?
• Is it possible to programmatically read and parse certificate templates on the client side, ideally via some Microsoft provided public API? I am asking this because sometimes it is useful to check, verify and debug that
  
  a) clients are getting all the expected templates;
  
  b) the content of templates are as expected (particularly useful if there were templates of duplicated names, or an old template has its setting changed but the name is kept);
  
  c) applicable clients are indeed getting the same list of templates.

Please bear with me as I am a rookie to AD CS.

Thanks!

 

Order of client certificates in the 'Select a certificate' dialog in Windows 10

I have several web sites where I have to log in using different client certificates. In Edge (and Internet Explorer) on Windows 10 I'm presented with this dialog:





most often, the certificate shown is not the one I need to use, so I can click on More choices, now it shows all available certificates:





and I can pick the correct one, but I would like to avoid the extra click.

I changed the Friendly Name of the certificates but it doesn't make a difference in the display order.

Does anybody know how to change the order in which the certificates are displayed in the dialog?