|
1 | 1 | ---
|
2 | 2 | title: "Special considerations for installing Visual Studio in an offline environment | Microsoft Docs"
|
3 | 3 | description: "{{PLACEHOLDER}}"
|
4 |
| -ms.date: "05/19/2017" |
| 4 | +ms.date: "06/05/2017" |
5 | 5 | ms.reviewer: "tims"
|
6 | 6 | ms.suite: ""
|
7 | 7 | ms.technology:
|
@@ -62,44 +62,46 @@ If you are scripting the deployment of Visual Studio in an offline environment t
|
62 | 62 |
|
63 | 63 | 3. Deploy the batch file to the client. This command should be run from an elevated process.
|
64 | 64 |
|
65 |
| -### What are the certificates files in the 'certificates' folder? |
66 |
| -The three .p12 files in this folder each contain an intermediate certificate and a root certificate. Most systems that are current with windows update will have these certificates already installed (see below for ‘How to check if certificates are already installed’). In many scenarios, some of the certificates will already be present. |
67 |
| -* ManifestSignCertificates.p12 |
68 |
| - * Intermediate certificate: “Microsoft Code Signing PCA 2011” |
69 |
| - * Not required. Improves performance in some scenarios if present. |
70 |
| - * Root certificate: “Microsoft Root Certificate Authority 2011” |
71 |
| - * Required for Windows 7 SP1 systems that are not current. |
72 |
| -* ManifestCounterSignCertificates.p12 |
73 |
| - * Intermediate certificate: “Microsoft Time-Stamp PCA 2010” |
74 |
| - * Not required. Improves performance in some scenarios if present. |
75 |
| - * Root certificate: “Microsoft Root Certificate Authority 2010” |
76 |
| - * Required for Windows 7 SP1 systems that are not current. |
77 |
| -* vs_installer_opc.SignCertificates.p12 |
78 |
| - * Intermediate certificate: “Microsoft Code Signing PCA” |
79 |
| - * Required for all systems. Please note that systems that are current with windows update will not always have this certificate. |
80 |
| - * Root certificate: “Microsoft Root Certificate Authority” |
81 |
| - * Required. However, this certificate ships with Win 7+ systems. |
| 65 | +### What are the certificates files in the `certificates` folder? |
| 66 | +The three `.p12` files in this folder each contain an intermediate certificate and a root certificate. Most systems that are current with Windows Update will have these certificates already installed. |
| 67 | + |
| 68 | +1. `ManifestSignCertificates.p12` contains: |
| 69 | + * Intermediate certificate: **Microsoft Code Signing PCA 2011** |
| 70 | + * Not required. Improves performance in some scenarios if present. |
| 71 | + * Root certificate: **Microsoft Root Certificate Authority 2011** |
| 72 | + * Required on Windows 7 Service Pack 1 systems that do not have the latest Windows Updates installed. |
| 73 | +2. `ManifestCounterSignCertificates.p12` |
| 74 | + * Intermediate certificate: **Microsoft Time-Stamp PCA 2010** |
| 75 | + * Not required. Improves performance in some scenarios if present. |
| 76 | + * Root certificate: **Microsoft Root Certificate Authority 2010** |
| 77 | + * Required for Windows 7 Service Pack 1 systems that do not have the latest Windows Updates installed. |
| 78 | +3. `vs_installer_opc.SignCertificates.p12` |
| 79 | + * Intermediate certificate: **Microsoft Code Signing PCA** |
| 80 | + * Required for all systems. Note that systems that with all updates applied from Windows Update may not have this certificate. |
| 81 | + * Root certificate: **Microsoft Root Certificate Authority** |
| 82 | + * Required. This certificate ships with systems running Windows 7 or later. |
82 | 83 |
|
83 | 84 | ### Why are the certificates from the `certificates` folder not installed automatically?
|
84 | 85 | When a signature is verified in an online environment, Windows APIs are used to download and add the certificates to the system. Verification that the certificate is trusted and allowed via administrative settings occurs during this process. This verification process cannot occur in most offline environments. Installing the certificates manually allows enterprise administrators to ensure the certificates are trusted and meet the security policy of their organization.
|
85 | 86 |
|
86 |
| -### How to check if certificates are already installed. |
| 87 | +### Checking if certificates are already installed |
87 | 88 | One way to check on the installing system is to follow these steps:
|
88 | 89 | * Run mmc.exe
|
89 |
| -* Click on File and Add/Remove Snap-in |
90 |
| - * Double-click on ‘Certificates’, select ‘Computer account’ and click ‘Next’ |
91 |
| - * Select ‘Local computer’, click ‘Finish’, and click ‘Ok’. |
92 |
| - * Expand ‘Certificates (Local Computer)’ |
93 |
| - * Expand Trusted Root Certification Authorities and select ‘Certificates’ |
| 90 | +* Click on File and select Add/Remove Snap-in |
| 91 | + * Double-click on **Certificates**, select **Computer account** and click **Next** |
| 92 | + * Select **Local computer**, click **Finish**, and click **Ok** |
| 93 | + * Expand **Certificates (Local Computer)** |
| 94 | + * Expand **Trusted Root Certification Authorities** and select **Certificates** |
94 | 95 | * Check this list for the necessary root certificates.
|
95 |
| - * Expand “Intermediate Certification Authorities and select ‘Certificates’ |
96 |
| - * Check this list for required intermediate certificates. |
97 |
| -* Click on File and Add/Remove Snap-in |
98 |
| - * Double-click on ‘Certificates’, select ‘My user account’, click ‘Finish’ and ‘OK’. |
99 |
| - * Expand ‘Certificates – Current User’ |
100 |
| - * Expand “Intermediate Certification Authorities and select ‘Certificates’ |
101 |
| - * Check this list for required intermediate certificates. |
102 |
| -If the certificates names were not in the ‘Issued To’ columns, they will need to be installed. If an intermediate certificate was only in the ‘Current User’ Intermediate Certificate store, then it is only available to the user that is logged in and could be needed to be installed for other users. |
| 96 | + * Expand **Intermediate Certification Authorities** and select **Certificates** |
| 97 | + * Check this list for the required intermediate certificates. |
| 98 | +* Click on File and select Add/Remove Snap-in |
| 99 | + * Double-click on **Certificates**, select **My user account**, click **Finish** and **OK**. |
| 100 | + * Expand **Certificates – Current User** |
| 101 | + * Expand **Intermediate Certification Authorities** and select **Certificates** |
| 102 | + * Check this list for the required intermediate certificates. |
| 103 | + |
| 104 | +If the certificates names were not in the **Issued To** columns, they will need to be installed. If an intermediate certificate was only in the **Current User** Intermediate Certificate store, then it is only available to the user that is logged in and could be needed to be installed for other users. |
103 | 105 |
|
104 | 106 | ## Install Visual Studio
|
105 | 107 | Having installed the certificates, deployment of Visual Studio can proceed offline without additional special steps, using the [instructions here](create-a-network-installation-of-visual-studio.md#deploying-from-a-network-installation).
|
|
0 commit comments