CertificationAuthorities

  • Article

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

HKLM\SOFTWARE\Microsoft\MSMQ\Parameters

Description

The CertificationAuthorities subkey contains X509-V3 certificates from external certification authorities (CAs). These subkeys are created by Microsoft Crypto API 2.0. Message Queuing (also known as MSMQ) uses the certificates to generate digital signatures that uniquely identify the message sender. The certificate and the digital signature are sent with each authenticated message.

Change Method

To enable or disable certificates, in Control Panel, double-click MS Message Queue, click the Security tab, and then click the Certification Authorities button.

Note

  • The entries in the subkeys in CertificationAuthorities store actual certification authority (CA) certificates, not just pointers to entries in another location.

Caution

  • Do not change the value of entries in this subkey by editing the registry. Changing these values can disable the security features of Message Queuing.