Skip to content

v1.4.0 - KeyGuard vs software key + certs in CurrentUser\My

Choose a tag to compare

View all tags
@gladjohn gladjohn released this 30 Jun 12:35
v1.4.0
604d1e5

New key/cert demos that make the KeyGuard value obvious:

  • 2 - Non-KeyGuard (software) key: 2A create, 2B list, 2C export -> SUCCEEDS (private key pulled out in the clear, shown in red).
  • 3 - Certs from both keys: mints a self-signed cert from each into CurrentUser\My. Open certmgr.msc -> Personal -> Certificates to compare: 'DemoKeyGuard-NonExportable' (private key NON-exportable) vs 'DemoSoftware-Exportable' (private key exportable).

Menu: 1 KeyGuard key, 2 Non-KeyGuard key, 3 Certs from both, 4 Classic bearer, 5 MSAL, 6 Identity Web, 7 AKV SDK, 8 all bound, 0 exit. Requires a VBS/KeyGuard VM for option 1 and the KeyGuard cert.

Assets 3
Loading