Windows 10: How to change the Default order among Multiple Client Certificates.

Discus and support How to change the Default order among Multiple Client Certificates. in AntiVirus, Firewalls and System Security to solve the problem; Our organization's smart cards policy contain several client certificates, however, the default certificate (Signature) is rarely the certificate that... Discussion in 'AntiVirus, Firewalls and System Security' started by LouLorello, Dec 6, 2019.

  1. How to change the Default order among Multiple Client Certificates.


    Our organization's smart cards policy contain several client certificates, however, the default certificate (Signature) is rarely the certificate that is needed, which is usually the Authentication one. Is there any way that a user can change or select the default certificate which would save several additional & annoying clicks multiple times per day? FWIW, prior to having a new motherboard installed a couple of months back, the Authentication cert was the default one, so this has been a recent change.


    The certs were all created on the same day, and all share the same creation & expiration dates.


    Any assistance w/b greatly appreciated, thank you.

    :)
     
    LouLorello, Dec 6, 2019
    #1
  2. Max Xapi Win User

    Client authentication with certificate, certificate order list or default certificate

    For developing purposes, I've several certificates in my current user's personal store. So when I have to authenticate with a certificate, ie. on my VPN client, Windows propose me to chose in my certificates list:

    Certificates list screenshot

    My "problem" is simple: actually, Windows displays the certificates in a "last installed certificate, first in the list" way. So he proposes me the blue one by default, but I would like to have the red one at the top (because it's my personal one, the other ones I only use them programmatically). Note: I'm in a professional context, I really can't make the trick to uninstall/reinstall my personal certificate, it could have too much side effects

    So is it possible to change the certificate proposed by default by Windows? Or is this possible to change the display order?

    Thanks.
     
    Max Xapi, Dec 6, 2019
    #2
  3. 1one.w01f Win User
    Certificate Templates on the client side

    Hi,

    Good day to you all! I hope this is the right place to ask this.

    I have a few questions related to how certificate templates are being stored and distributed under AD CS:

    • How do the clients get a list of applicable certificate templates from the enterprise CA, which is shown at the time when a new manual certificate enrollment is performed (e.g., someone goes to certmgr and request for a new certificate)?
    • How are certificate templates being stored on both the CA side and the client side? Is there a directory that the templates reside in? Or are they just a collection of Windows registries (e.g. Software\Microsoft\Cryptography\CertificateTemplateCache
      under HKCU and HKLM)?
    • Is it possible to programmatically read and parse certificate templates on the client side, ideally via some Microsoft provided public API? I am asking this because sometimes it is useful to check, verify and debug that

      a) clients are getting all the expected templates;

      b) the content of templates are as expected (particularly useful if there were templates of duplicated names, or an old template has its setting changed but the name is kept);

      c) applicable clients are indeed getting the same list of templates.
    Please bear with me as I am a rookie to AD CS.

    Thanks!
     
    1one.w01f, Dec 6, 2019
    #3
  4. How to change the Default order among Multiple Client Certificates.

    Order of client certificates in the 'Select a certificate' dialog in Windows 10

    I have several web sites where I have to log in using different client certificates. In Edge (and Internet Explorer) on Windows 10 I'm presented with this dialog:


    How to change the Default order among Multiple Client Certificates. zv5Lr.png


    most often, the certificate shown is not the one I need to use, so I can click on More choices, now it shows all available certificates:


    How to change the Default order among Multiple Client Certificates. 8zMNJ.png


    and I can pick the correct one, but I would like to avoid the extra click.

    I changed the Friendly Name of the certificates but it doesn't make a difference in the display order.

    Does anybody know how to change the order in which the certificates are displayed in the dialog?
     
    Peter Hahndorf, Dec 6, 2019
    #4
Thema:

How to change the Default order among Multiple Client Certificates.

Loading...
  1. How to change the Default order among Multiple Client Certificates. - Similar Threads - change Default order

  2. How to Change the Order of Keyboard Layouts

    in Windows 10 Customization
    How to Change the Order of Keyboard Layouts: I have three keyboards layouts on my latest Windows 10 OS: English, Ukrainian and Chinese. Initially the order was such: English > Ukrainian > Chinese and then back to English. Some time ago, for some reason, this order changed and it is English > Chinese > Ukrainian now....
  3. Multiple Display Order

    in Windows 10 Drivers and Hardware
    Multiple Display Order: I have a laptop with two monitors attached and it has been working perfect. I moved my office and had to disconnect everything and now I cannot get it set back up properly. When I go to display settings I see all three displays but they are in the order 2, 3, 1 and I...
  4. Default email client changed after 1903

    in Windows 10 Customization
    Default email client changed after 1903: Lately since 1903 I'm seeing a periodic new screen telling me to set Outlook as my default email client because it thinks I don't have one set: "Either there is no default mail client or the current mail client cannot fulfill the messaging request. Please run Microsoft...
  5. Windows 10 https + client certificate

    in Windows 10 Network and Sharing
    Windows 10 https + client certificate: Hi I have a windows 10 enterprise, and I have got some odd behaviour. Whenever I attempt to access a site that uses https and client certificate authentication I get a 403 forbidden error. This happens for multiple different sites with multiple different certificates....
  6. Changing Boot Order

    in Windows 10 Support
    Changing Boot Order: Having found my way into the BIOS to change the boot order I am faced with 4 options. Which one do I select? I want the PC to call first on a USB Recovery Drive, created with Macrium Reflect. Should I go back to BIOS to make a note of the options and list them here, as I...
  7. Outlook Default Mail Client

    in Windows 10 Customization
    Outlook Default Mail Client: Following earlier instructions (using windows 10) I set outlook as my default e-mail client for in both Outlook and my registry. When I use my scanner (Brother MFC-J4420DW printer) to scan to E-Mail I get the message: "Either there is no default mail client or the current...
  8. Single Certificate for multiple client devices for an EAP-TLS system

    in AntiVirus, Firewalls and System Security
    Single Certificate for multiple client devices for an EAP-TLS system: Hello, I am designing a system to include multiple laptops connected to a Server via an EAP-TLS capable Access Point. So I want to configure the system for EAP-TLS WAP security. There are a couple of use cases in the requirements where having unique certificates in the...
  9. Change the order of administrators

    in Windows 10 Customization
    Change the order of administrators: Hello. I have a very specific and not urgent question regarding the order of administrators: Whenever I do something that requires the administrator password, the account that is always selected by default is not the account that I want to be there; I have two administrator...
  10. How to set default Sort Order for files

    in Windows 10 Performance & Maintenance
    How to set default Sort Order for files: Hi, I was wondering if there is a way to automatically set by default, the View/Sort Order. What I mean is, I don't want to keep opening up my file browser (Explorer), clicking on Name, then Type to sort them. Is there a way to have this automatically so it by default? I know...