Nelson Bolyard wrote:
Try
certutil -L -h all
to get a list of all certs in all slots.
X:\ThunderbirdProfile>certutil -L -h all -d .
Enter Password or Pin for "Embedded Security Chip":
Gatekeeper Root CA - eSign Australia CT,C,C
Gatekeeper Grade 3 Individual CA - eSign Australia CT,C,C
Gatekeeper TYPE 3 CA - eSign Australia CT,C,C
Builtin Object Token:Verisign/RSA Secure Server CA CG,C,p
Builtin Object Token:GTE CyberTrust Root CA CG,C,C
Builtin Object Token:GTE CyberTrust Global Root CG,C,C
Builtin Object Token:Thawte Personal Basic CA p,C,C
Builtin Object Token:Thawte Personal Premium CA p,C,C
Builtin Object Token:Thawte Personal Freemail CA p,C,p
Builtin Object Token:Thawte Server CA CG,p,C
Builtin Object Token:Thawte Premium Server CA CG,p,C
Builtin Object Token:Equifax Secure CA C,C,C
Builtin Object Token:ABAecom (sub., Am. Bankers Assn.) Root CA CG,C,C
Builtin Object Token:Digital Signature Trust Co. Global CA 1 CG,C,C
Builtin Object Token:Digital Signature Trust Co. Global CA 3 CG,C,C
Builtin Object Token:Digital Signature Trust Co. Global CA 2 CG,C,C
Builtin Object Token:Digital Signature Trust Co. Global CA 4 CG,C,C
Builtin Object Token:Verisign Class 1 Public Primary Certification
Authority p,C,p
Builtin Object Token:Verisign Class 2 Public Primary Certification
Authority p,C,C
Builtin Object Token:Verisign Class 3 Public Primary Certification
Authority CG,C,C
Builtin Object Token:Verisign Class 1 Public Primary Certification
Authority - G2 p,C,p
Builtin Object Token:Verisign Class 2 Public Primary Certification
Authority - G2 p,C,C
Builtin Object Token:Verisign Class 3 Public Primary Certification
Authority - G2 C,C,C
Builtin Object Token:Verisign Class 4 Public Primary Certification
Authority - G2 CG,C,C
Builtin Object Token:GlobalSign Root CA C,C,C
Builtin Object Token:ValiCert Class 1 VA C,C,C
Builtin Object Token:ValiCert Class 2 VA C,C,C
Builtin Object Token:RSA Root Certificate 1 C,C,C
Builtin Object Token:Verisign Class 1 Public Primary Certification
Authority - G3 p,C,p
Builtin Object Token:Verisign Class 2 Public Primary Certification
Authority - G3 p,C,C
Builtin Object Token:Verisign Class 3 Public Primary Certification
Authority - G3 C,C,C
Builtin Object Token:Verisign Class 4 Public Primary Certification
Authority - G3 CG,C,C
Builtin Object Token:Entrust.net Secure Server CA C,C,C
Builtin Object Token:Entrust.net Secure Personal CA C,C,C
Builtin Object Token:Entrust.net Premium 2048 Secure Server CA C,C,C
Builtin Object Token:Baltimore CyberTrust Root C,C,p
Builtin Object Token:Equifax Secure Global eBusiness CA C,C,C
Builtin Object Token:Equifax Secure eBusiness CA 1 C,C,C
Builtin Object Token:Equifax Secure eBusiness CA 2 C,C,C
Builtin Object Token:Visa International Global Root 2 C,C,p
Builtin Object Token:beTRUSTed Root CA C,C,C
Builtin Object Token:AddTrust Low-Value Services Root C,C,p
Builtin Object Token:AddTrust External Root C,C,C
Builtin Object Token:AddTrust Public Services Root ,,
Builtin Object Token:AddTrust Qualified Certificates Root C,C,C
Builtin Object Token:Verisign Class 1 Public Primary OCSP Responder C,C,C
Builtin Object Token:Verisign Class 2 Public Primary OCSP Responder C,C,C
Builtin Object Token:Verisign Class 3 Public Primary OCSP Responder C,C,C
Builtin Object Token:Verisign Secure Server OCSP Responder C,C,C
Builtin Object Token:Verisign Time Stamping Authority CA C,C,C
Builtin Object Token:Thawte Time Stamping CA C,C,C
Builtin Object Token:Entrust.net Global Secure Server CA C,C,C
Builtin Object Token:Entrust.net Global Secure Personal CA C,C,C
Builtin Object Token:AOL Time Warner Root Certification Authority 1 C,C,C
Builtin Object Token:AOL Time Warner Root Certification Authority 2 C,C,C
Builtin Object Token:beTRUSTed Root CA-Baltimore Implementation C,C,C
Builtin Object Token:beTRUSTed Root CA - Entrust Implementation C,C,C
Builtin Object Token:beTRUSTed Root CA - RSA Implementation C,C,C
Builtin Object Token:RSA Security 2048 v3 C,C,C
Builtin Object Token:RSA Security 1024 v3 C,C,C
Builtin Object Token:GeoTrust Global CA C,C,C
Builtin Object Token:UTN-USER First-Network Applications C,C,C
Builtin Object Token:America Online Root Certification Authority 1 C,C,C
Builtin Object Token:America Online Root Certification Authority 2 C,C,C
Builtin Object Token:Visa eCommerce Root C,C,C
Builtin Object Token:TC TrustCenter, Germany, Class 2 CA C,C,C
Builtin Object Token:TC TrustCenter, Germany, Class 3 CA C,C,C
Builtin Object Token:Certum Root CA C,C,C
Builtin Object Token:Comodo AAA Services root C,C,C
Builtin Object Token:Comodo Secure Services root C,C,C
Builtin Object Token:Comodo Trusted Services root C,C,C
Builtin Object Token:IPS Chained CAs root C,C,C
Builtin Object Token:IPS CLASE1 root C,C,C
Builtin Object Token:IPS CLASE3 root C,C,C
Builtin Object Token:IPS CLASEA1 root C,C,C
Builtin Object Token:IPS CLASEA3 root C,C,C
Builtin Object Token:IPS Servidores root C,C,C
Builtin Object Token:IPS Timestamping root C,C,C
Builtin Object Token:QuoVadis Root CA C,C,C
Builtin Object Token:Security Communication Root CA C,C,C
Builtin Object Token:Sonera Class 1 Root CA p,C,p
Builtin Object Token:Sonera Class 2 Root CA C,C,C
Builtin Object Token:Staat der Nederlanden Root CA C,C,C
Builtin Object Token:TDC Internet Root CA C,C,C
Builtin Object Token:TDC OCES Root CA C,C,C
Builtin Object Token:UTN DATACorp SGC Root CA C,p,p
Builtin Object Token:UTN USERFirst Email Root CA p,C,p
Builtin Object Token:UTN USERFirst Hardware Root CA C,p,p
Builtin Object Token:UTN USERFirst Object Root CA p,p,C
Builtin Object Token:Camerfirma Chambers of Commerce Root C,C,C
Builtin Object Token:Camerfirma Global Chambersign Root C,C,C
Builtin Object Token:NetLock Notary (Class A) Root C,C,C
Builtin Object Token:NetLock Business (Class B) Root C,C,C
Builtin Object Token:NetLock Express (Class C) Root C,C,C
Builtin Object Token:XRamp Global CA Root C,C,C
Builtin Object Token:Go Daddy Class 2 CA C,C,C
Builtin Object Token:Starfield Class 2 CA C,C,C
X:\ThunderbirdProfile>
If that still doesn't show them try with the slot name
certutil -L -h "HP ProtectTools Embedded Security Chip"
Tried that: got exactly the same output as above.
or try wiht the token name
certutil -L -h "Embedded Security Chip"
X:\ThunderbirdProfile>certutil -L -h "Embedded Security Chip" -d .
Enter Password or Pin for "Embedded Security Chip":
X:\ThunderbirdProfile>
That cannot be good, and Yes, I'm sure that I got the password right.
Certs from your TPM should show their "nicknames" (a.k.a. "friendly names")
Not so much.
I used modutil to give me some more information about the TPM:
X:\ThunderbirdProfile>modutil -dbdir . -list "HP TPM"
Using database directory ....
-----------------------------------------------------------
Name: HP TPM
Library file: C:\WINDOWS\system32\IfxTpmCk.dll
Manufacturer: Infineon Technologies AG
Description: TPM Cryptoki Provider
PKCS #11 Version 2.11
Library Version: 2.0
Cipher Enable Flags: None
Default Mechanism Flags: None
Slot: HP ProtectTools Embedded Security Chip
Slot Mechanism Flags: None
Manufacturer: Infineon Technologies AG
Type: Hardware
Version Number: 1.0
Firmware Version: 1.0
Status: Enabled
Token Name: Embedded Security Chip
Token Manufacturer: Infineon Technologies AG
Token Model: SLD 9630 TT 1.1
Token Serial Number: N/A
Token Version: 1.0
Token Firmware Version: 1.0
Access: NOT Write Protected
Login Type: Login required
User Pin: Initialized
-----------------------------------------------------------
X:\ThunderbirdProfile>
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto