Skip to content

Commit ba3adac

Browse files
authored
Minor tweaks to language and style
1 parent 4d8023c commit ba3adac

File tree

1 file changed

+34
-32
lines changed

1 file changed

+34
-32
lines changed

docs/install/install-visual-studio-in-offline-environment.md

Lines changed: 34 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: "Special considerations for installing Visual Studio in an offline environment | Microsoft Docs"
33
description: "{{PLACEHOLDER}}"
4-
ms.date: "05/19/2017"
4+
ms.date: "06/05/2017"
55
ms.reviewer: "tims"
66
ms.suite: ""
77
ms.technology:
@@ -62,44 +62,46 @@ If you are scripting the deployment of Visual Studio in an offline environment t
6262

6363
3. Deploy the batch file to the client. This command should be run from an elevated process.
6464

65-
### What are the certificates files in the 'certificates' folder?
66-
The three .p12 files in this folder each contain an intermediate certificate and a root certificate. Most systems that are current with windows update will have these certificates already installed (see below for ‘How to check if certificates are already installed’). In many scenarios, some of the certificates will already be present.
67-
* ManifestSignCertificates.p12
68-
* Intermediate certificate: “Microsoft Code Signing PCA 2011”
69-
* Not required. Improves performance in some scenarios if present.
70-
* Root certificate: “Microsoft Root Certificate Authority 2011”
71-
* Required for Windows 7 SP1 systems that are not current.
72-
* ManifestCounterSignCertificates.p12
73-
* Intermediate certificate: “Microsoft Time-Stamp PCA 2010”
74-
* Not required. Improves performance in some scenarios if present.
75-
* Root certificate: “Microsoft Root Certificate Authority 2010”
76-
* Required for Windows 7 SP1 systems that are not current.
77-
* vs_installer_opc.SignCertificates.p12
78-
* Intermediate certificate: “Microsoft Code Signing PCA”
79-
* Required for all systems. Please note that systems that are current with windows update will not always have this certificate.
80-
* Root certificate: “Microsoft Root Certificate Authority”
81-
* Required. However, this certificate ships with Win 7+ systems.
65+
### What are the certificates files in the `certificates` folder?
66+
The three `.p12` files in this folder each contain an intermediate certificate and a root certificate. Most systems that are current with Windows Update will have these certificates already installed.
67+
68+
1. `ManifestSignCertificates.p12` contains:
69+
* Intermediate certificate: **Microsoft Code Signing PCA 2011**
70+
* Not required. Improves performance in some scenarios if present.
71+
* Root certificate: **Microsoft Root Certificate Authority 2011**
72+
* Required on Windows 7 Service Pack 1 systems that do not have the latest Windows Updates installed.
73+
2. `ManifestCounterSignCertificates.p12`
74+
* Intermediate certificate: **Microsoft Time-Stamp PCA 2010**
75+
* Not required. Improves performance in some scenarios if present.
76+
* Root certificate: **Microsoft Root Certificate Authority 2010**
77+
* Required for Windows 7 Service Pack 1 systems that do not have the latest Windows Updates installed.
78+
3. `vs_installer_opc.SignCertificates.p12`
79+
* Intermediate certificate: **Microsoft Code Signing PCA**
80+
* Required for all systems. Note that systems that with all updates applied from Windows Update may not have this certificate.
81+
* Root certificate: **Microsoft Root Certificate Authority**
82+
* Required. This certificate ships with systems running Windows 7 or later.
8283

8384
### Why are the certificates from the `certificates` folder not installed automatically?
8485
When a signature is verified in an online environment, Windows APIs are used to download and add the certificates to the system. Verification that the certificate is trusted and allowed via administrative settings occurs during this process. This verification process cannot occur in most offline environments. Installing the certificates manually allows enterprise administrators to ensure the certificates are trusted and meet the security policy of their organization.
8586

86-
### How to check if certificates are already installed.
87+
### Checking if certificates are already installed
8788
One way to check on the installing system is to follow these steps:
8889
* Run mmc.exe
89-
* Click on File and Add/Remove Snap-in
90-
* Double-click on Certificates, select Computer account and click Next
91-
* Select Local computer, click Finish, and click ‘Ok’.
92-
* Expand Certificates (Local Computer)
93-
* Expand Trusted Root Certification Authorities and select Certificates
90+
* Click on File and select Add/Remove Snap-in
91+
* Double-click on **Certificates**, select **Computer account** and click **Next**
92+
* Select **Local computer**, click **Finish**, and click **Ok**
93+
* Expand **Certificates (Local Computer)**
94+
* Expand **Trusted Root Certification Authorities** and select **Certificates**
9495
* Check this list for the necessary root certificates.
95-
* Expand “Intermediate Certification Authorities and select ‘Certificates’
96-
* Check this list for required intermediate certificates.
97-
* Click on File and Add/Remove Snap-in
98-
* Double-click on ‘Certificates’, select ‘My user account’, click ‘Finish’ and ‘OK’.
99-
* Expand ‘Certificates – Current User’
100-
* Expand “Intermediate Certification Authorities and select ‘Certificates’
101-
* Check this list for required intermediate certificates.
102-
If the certificates names were not in the ‘Issued To’ columns, they will need to be installed. If an intermediate certificate was only in the ‘Current User’ Intermediate Certificate store, then it is only available to the user that is logged in and could be needed to be installed for other users.
96+
* Expand **Intermediate Certification Authorities** and select **Certificates**
97+
* Check this list for the required intermediate certificates.
98+
* Click on File and select Add/Remove Snap-in
99+
* Double-click on **Certificates**, select **My user account**, click **Finish** and **OK**.
100+
* Expand **Certificates – Current User**
101+
* Expand **Intermediate Certification Authorities** and select **Certificates**
102+
* Check this list for the required intermediate certificates.
103+
104+
If the certificates names were not in the **Issued To** columns, they will need to be installed. If an intermediate certificate was only in the **Current User** Intermediate Certificate store, then it is only available to the user that is logged in and could be needed to be installed for other users.
103105

104106
## Install Visual Studio
105107
Having installed the certificates, deployment of Visual Studio can proceed offline without additional special steps, using the [instructions here](create-a-network-installation-of-visual-studio.md#deploying-from-a-network-installation).

0 commit comments

Comments
 (0)