(VBScript) Import a PFX/P12 into the Windows Certificate Stores

Demonstrates how to import the certificates contained in a .pfx/.p12 to the Windows certificate stores.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

Dim fso, outFile
Set fso = CreateObject("Scripting.FileSystemObject")
'Create a Unicode (utf-16) output text file.
Set outFile = fso.CreateTextFile("output.txt", True, True)

' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.Cert")
set primaryCert = CreateObject("Chilkat.Cert")

' Load a PFX file into a certificate object.
' The cert object will contain the certificate from the PFX that has a private key.
' The certs in the chain of authentication (if contained in the PFX) are also loaded,
' and can be accessed by getting the certificate chain (see below).
' If the PFX did not include the issuer certs in the chain of authentication, then Chilkat will
' automatically try to construct the issuer chain from the CA and intermedicate CA certs
' already installed on the Windows system.
pfxPassword = "myPfxPassword"
success = primaryCert.LoadPfxFile("qa_data/pfx/somePfx.p12",pfxPassword)
If (success = 0) Then
    outFile.WriteLine(primaryCert.LastErrorText)
    WScript.Quit
End If

' certChain is a Chilkat.CertChain
Set certChain = primaryCert.GetCertChain()
If (primaryCert.LastMethodSuccess = 0) Then
    outFile.WriteLine(primaryCert.LastErrorText)
    WScript.Quit
End If

' If the certificate chain reaches the root CA cert, then the last cert in the chain
' is the root CA cert.
chainReachesRoot = certChain.ReachesRoot
If (chainReachesRoot = 1) Then
    outFile.WriteLine("The certificate chain reaches the root CA cert.")
End If

i = 0
numCerts = certChain.NumCerts
Do While i < numCerts
    ' cert is a Chilkat.Cert
    Set cert = certChain.GetCert(i)
    outFile.WriteLine("SubjectDN " & i & ": " & cert.SubjectDN)
    outFile.WriteLine("IssuerDN " & i & ": " & cert.IssuerDN)
    outFile.WriteLine("--")

    i = i + 1
Loop

' The primary cert having the private key will be imported into the Current User "My" certificate store.
' Any intermediate root certificates will be imported into certificate store for intermediate certificate authorities.
' The root CA cert will be imported into the Root CA cert store.

' Let's open each of these 3 certificate stores..
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.CertStore")
set certStoreCU = CreateObject("Chilkat.CertStore")
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.CertStore")
set certStoreCA = CreateObject("Chilkat.CertStore")
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.CertStore")
set certStoreRootCA = CreateObject("Chilkat.CertStore")
readOnlyFlag = 0

' "CurrentUser" and "My" are the exact keywords to select your user account's certificate store.
success = certStoreCU.OpenWindowsStore("CurrentUser","My",readOnlyFlag)
If (success = 0) Then
    outFile.WriteLine("Failed to open the CurrentUser/My certificate store for read/write.")

    WScript.Quit
End If

' Certificate store for intermediate certification authorities (CAs). 
success = certStoreCA.OpenWindowsStore("CurrentUser","CertificationAuthority",readOnlyFlag)
If (success = 0) Then
    outFile.WriteLine("Failed to open the CurrentUser/CertificationAuthority certificate store for read/write.")

    WScript.Quit
End If

' Certificate store for trusted root certification authorities (CAs). 
success = certStoreRootCA.OpenWindowsStore("CurrentUser","Root",readOnlyFlag)
If (success = 0) Then
    outFile.WriteLine("Failed to open the CurrentUser/Root certificate store for read/write.")

    WScript.Quit
End If

' Iterate over the certs in the chain and import each into the desired certificate store.
allSuccess = 1
i = 0
Do While i < numCerts
    ' cert is a Chilkat.Cert
    Set cert = certChain.GetCert(i)
    If (i = 0) Then
        ' Import the primary certificate into the CurrentUser/My certificate store.
        success = certStoreCU.AddCertificate(cert)
        If (success = 0) Then
            outFile.WriteLine(certStoreCU.LastErrorText)
            allSuccess = 0
        End If

    Else
        If ((i = (numCerts - 1)) And (chainReachesRoot = 1)) Then
            ' Add the root CA certificate to the CurrentUser/Root certificate store.
            ' (Your application can obviously choose whether this should be done or not.  Perhaps you prompt the user.)

            ' Note: If the root CA cert is already present in the Windows certificate store, Windows will display
            ' a dialog to ask if it should be deleted.  Chilkat does not explicitly display dialogs.
            success = certStoreRootCA.AddCertificate(cert)
            If (success = 0) Then
                outFile.WriteLine(certStoreRootCA.LastErrorText)
                allSuccess = 0
            End If

        Else
            ' This is an intermediate CA certificate.
            success = certStoreCA.AddCertificate(cert)
            If (success = 0) Then
                outFile.WriteLine(certStoreCA.LastErrorText)
                allSuccess = 0
            End If

        End If

    End If

    If (success = 0) Then
        outFile.WriteLine("Failed to import certificate.")
    End If

    i = i + 1
Loop

outFile.WriteLine("allSuccess = " & allSuccess)

outFile.Close