(SQL Server) Backup Windows Current User / Personal Certificates to a .zip

Demonstrates how to backup the certificates in the Windows registry-based Current User certificate store (in the "Personal" Logical Store as seen in certmgr.msc), to a zip archive. Certificates having an exportable private key are exported to .pfx files. Certificates with no private key, or with a non-exportable private key, are exported to .cer files.

Obviously, this example only runs on Windows computers.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    DECLARE @iTmp0 int
    -- Important: Do not use nvarchar(max).  See the warning about using nvarchar(max).
    DECLARE @sTmp0 nvarchar(4000)
    DECLARE @certStore int
    -- Use "Chilkat_9_5_0.CertStore" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.CertStore', @certStore OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    DECLARE @readOnly int
    SELECT @readOnly = 1
    DECLARE @success int
    EXEC sp_OAMethod @certStore, 'OpenCurrentUserStore', @success OUT, @readOnly
    IF Not @success
      BEGIN
        EXEC sp_OAGetProperty @certStore, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @certStore
        RETURN
      END

    DECLARE @pfxPassword nvarchar(4000)
    SELECT @pfxPassword = 'secret'

    DECLARE @allSuccess int
    SELECT @allSuccess = 1
    DECLARE @numSuccess int
    SELECT @numSuccess = 0

    DECLARE @entry int

    DECLARE @zip int
    -- Use "Chilkat_9_5_0.Zip" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.Zip', @zip OUT

    EXEC sp_OAMethod @zip, 'NewZip', @success OUT, 'qa_output/personalCerts.zip'

    DECLARE @certData int
    -- Use "Chilkat_9_5_0.BinData" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.BinData', @certData OUT

    DECLARE @sbFilename int
    -- Use "Chilkat_9_5_0.StringBuilder" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.StringBuilder', @sbFilename OUT

    -- Iterate over the certificates in the Current User store.
    DECLARE @numCerts int
    EXEC sp_OAGetProperty @certStore, 'NumCertificates', @numCerts OUT
    DECLARE @i int
    SELECT @i = 0
    WHILE @i < @numCerts
      BEGIN
        DECLARE @cert int
        EXEC sp_OAMethod @certStore, 'GetCertificate', @cert OUT, @i

        EXEC sp_OAGetProperty @cert, 'SubjectDN', @sTmp0 OUT
        PRINT 'DN = ' + @sTmp0

        EXEC sp_OAMethod @sbFilename, 'SetString', @success OUT, 'cert'
        EXEC sp_OAMethod @sbFilename, 'AppendInt', @success OUT, @i + 1

        DECLARE @bHasPrivateKey int
        EXEC sp_OAMethod @cert, 'HasPrivateKey', @bHasPrivateKey OUT
        EXEC sp_OAGetProperty @cert, 'PrivateKeyExportable', @iTmp0 OUT
        IF (@bHasPrivateKey = 1) and (@iTmp0 = 1)
          BEGIN
            -- Export to a .pfx
            EXEC sp_OAMethod @cert, 'ExportToPfxBd', @success OUT, @pfxPassword, 1, @certData
            IF @success = 1
              BEGIN
                EXEC sp_OAMethod @sbFilename, 'Append', @success OUT, '.pfx'
                EXEC sp_OAMethod @sbFilename, 'GetAsString', @sTmp0 OUT
                EXEC sp_OAMethod @zip, 'AppendBd', @entry OUT, @sTmp0, @certData
                EXEC @hr = sp_OADestroy @entry

              END
          END
        ELSE
          BEGIN
            -- Export to a .cer
            EXEC sp_OAMethod @cert, 'ExportCertDerBd', @success OUT, @certData
            IF @success = 1
              BEGIN
                EXEC sp_OAMethod @sbFilename, 'Append', @success OUT, '.cer'
                EXEC sp_OAMethod @sbFilename, 'GetAsString', @sTmp0 OUT
                EXEC sp_OAMethod @zip, 'AppendBd', @entry OUT, @sTmp0, @certData
                EXEC @hr = sp_OADestroy @entry

              END
          END
        IF @success <> 1
          BEGIN
            SELECT @allSuccess = 0
          END
        ELSE
          BEGIN
            SELECT @numSuccess = @numSuccess + 1
          END
        SELECT @i = @i + 1
      END

    IF @numSuccess > 0
      BEGIN
        EXEC sp_OAMethod @zip, 'WriteZipAndClose', @success OUT
        IF @success <> 1
          BEGIN
            EXEC sp_OAGetProperty @zip, 'LastErrorText', @sTmp0 OUT
            PRINT @sTmp0
            SELECT @allSuccess = 0
          END
      END


    PRINT 'All success = ' + @allSuccess

    EXEC @hr = sp_OADestroy @certStore
    EXEC @hr = sp_OADestroy @zip
    EXEC @hr = sp_OADestroy @certData
    EXEC @hr = sp_OADestroy @sbFilename


END
GO