Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

Certificate thumbprint displayed in MMC certificate snap-in has extra invisible unicode character


Symptoms

If you try and copy and paste thumbprint from this snap-in, an extra (invisible) unicode character is being copied also. This can lead to problems that are non-obvious. For example, copy and paste thumbprint into notepad. It appears that thumbprint is copied correctly, but if you try to save document, it reports that the document contains unicode characters.

If you try to copy paste this thumbprint into an application that asks for a certificate thumbprint, this can lead to errors where the invisible unicode character is unknowingly included. For example, there is a scenario in virtual machine manager that asks for a certificate thumbprint. Copy/pasting from this snap-in will lead to a non-obvious failure due to included unicode character.

One of the applications affected with this case is SQL Server when the certificate is needed for SSL Encrytopn of SSL connections. If simply copying the thumbpint from the certificate GUI and pasting it in  with the invisible character, SQL Server fails to start.

↑ Back to the top


Cause

This is caused by an issue in Richedit control which is used for the Certificate UI.

↑ Back to the top


Resolution

The following workarounds can be used:

1. Instead of using certificates snap-in and certificate GUI, use certutil command line tool:
- "certutil -store -user my" for the user certificates or,
- "certutil -store my" for the machine certificates.

The thumbprint can be located in the line that starts with "Cert Hash(sha1)"

Cert Hash(sha1): e8 12 4b 42 c4 04 fd ca 8c ec 21 f1 91 76 5c b7 c3 ad 1d 55

 2. When using certificates snap-in and certificate GUI, do NOT copy "extra space" that appears before the certificate thumbpint from the Richedit control.

↑ Back to the top


Keywords: vkball, kb

↑ Back to the top

Article Info
Article ID : 2023835
Revision : 1
Created on : 1/8/2017
Published on : 7/26/2010
Exists online : False
Views : 145