(Node.js) Install PFX Certificates and Private Keys to Windows

Demonstrates how to install the certificates and private keys contained in a PFX to the Windows certificate stores.

Note: This example requires Chilkat v9.5.0.83 or greater.

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOSX, and ARM

var os = require('os');
if (os.platform() == 'win32') {  
    if (os.arch() == 'ia32') {
        var chilkat = require('@chilkat/ck-node21-win-ia32');
    } else {
        var chilkat = require('@chilkat/ck-node21-win64'); 
    }
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node21-arm');
    } else if (os.arch() == 'x86') {
        var chilkat = require('@chilkat/ck-node21-linux32');
    } else {
        var chilkat = require('@chilkat/ck-node21-linux64');
    }
} else if (os.platform() == 'darwin') {
    if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node21-mac-m1');
    } else {
        var chilkat = require('@chilkat/ck-node21-macosx');
    }
}

function chilkatExample() {

    // Note: This example requires Chilkat v9.5.0.83 or greater.

    var pfx = new chilkat.Pfx();

    var success = pfx.LoadPfxFile("qa_data/pfx/test_secret.pfx","secret");
    if (success == false) {
        console.log(pfx.LastErrorText);
        return;
    }

    // See the online reference documentation for more information about the ImportToWindows method.

    // Mark imported privae keys as exportable.
    var exportable = true;

    // If userProtected is true, the user is to be notified through a dialog box or other method when certain attempts to use this key are made. 
    var userProtected = false;

    // If machineKeyset is true, the private keys are stored under the local computer and not under the current user. 
    var machineKeyset = false;

    // If allowOverwriteKey is true, allow overwrite of the existing key. 
    var allowOverwriteKey = false;

    // If allowExport is true, then the imported key can later be exported back to a PFX.
    // (It also allows for applications to directly access the private key material.)
    var allowExport = true;

    // Indicate where to import types of certs.
    var leafStore = "My";
    var intermediateStore = "CertificationAuthority";
    var rootStore = "AuthRoot";

    success = pfx.ImportToWindows(exportable,userProtected,machineKeyset,allowOverwriteKey,allowExport,leafStore,intermediateStore,rootStore,"");
    if (success == false) {
        console.log(pfx.LastErrorText);
        return;
    }

    // Show information about the certificates imported
    // json: JsonObject
    var json = pfx.LastJsonData();
    json.EmitCompact = false;
    console.log(json.Emit());

    // Sample LastJsonData:

    // {
    //   "exportable": true,
    //   "userProtected": false,
    //   "machineKeyset": false,
    //   "allowOverwriteKey": false,
    //   "allowExport": true,
    //   "key": [
    //     {
    //       "name": "{F09B755A-1E90-444D-9851-02B86CA14961}",
    //       "storageProvider": "Microsoft Software Key Storage Provider"
    //     }
    //   ],
    //   "cert": [
    //     {
    //       "DN": "...",
    //       "type": "intermediate",
    //       "storeName": "CertificationAuthority",
    //       "imported": true
    //     },
    //     {
    //       "DN": "...",
    //       "type": "root",
    //       "storeName": "AuthRoot",
    //       "imported": true
    //     },
    //     {
    //       "DN": "....",
    //       "type": "leaf",
    //       "storeName": "My",
    //       "keyContainer": "{345D4EAD-B8DD-4150-9A1F-4BC6437E77A2}",
    //       "machineKeyset": true,
    //       "imported": true
    //     }
    //   ]
    // }

    console.log("Success.");

}

chilkatExample();