Symantec PCANYWHERE - V12.5 User Manual page 224

224 Securing your computer and sessions
Using encryption to protect data
Configuring pcAnywhere to use public-key encryption on
Windows Vista
Although a user can be logged on as an administrator on Vista, it runs all
applications with standard user privileges. When the host is configured to run as
a service, it looks for the certificates in the computer's store. Since the standard
user does not have access to the computer's certificate store, the private keys are
not displayed on the Host Properties > Encryption tab. In this case, to configure
Public Key Encryption, do one of the following:
Launch pcAnywhere with administrative privileges by right-clicking the
desktop icon, and then clicking Run as administrator. Configure the host to
run as a service with Public Key Encryption.
As a standard user, launch pcAnywhere, and then configure the host to run
as an application with Public Key Encryption.
Creating a certificate file to send to another user
Certificates are data documents that contain identification information that
includes the user's name, public key, issuing authority, and data signature.
Symantec pcAnywhere requires that you use Microsoft-compatible certificates.
You can obtain these from a commercial certificate authority (for example,
VeriSign or Entrust) or from an internal certificate server. Vista has the capability
to create its own certificate, called a self-generated certificate, under the certificate
section of IIS. You can create the certificate from IIS 7.0.
You can create a certificate file by exporting your certificate in Microsoft Internet
Explorer. Use any export format that does not include the private key (for example,
PKCS#7 with a .p7b file extension). Send the file to the computer to which you
want to connect using a secure method.
Alternatively, the other user can download your certificate from the certificate
authority. Follow the certificate authority's instructions for finding and
downloading another user's certificate.
To create a certificate file to send to another user
1
In Microsoft Internet Explorer, on the Tools menu, click Internet Options.
2
In the Internet Options window, on the Content tab, click Certificates.
3
Select your certificate, and then click Export.
For more information, see the documentation for Microsoft Internet Explorer.