MSDN Library

public sealed class CertificateMapping

Mapping a Client Certificate to a User Account

The following example demonstrates how to create a CertificateMapping object, associate a client certificate from the 'My' certificate store with a specific Windows user account, and configure the mapping.

using System;
using System.Net.Security;
using System.Security.Cryptography.X509Certificates;

public class CertificateMappingExample
{
    public static void Main(string[] args)
    {
        try
        {
            // Specify the certificate details
            string certificateThumbprint = "YOUR_CERTIFICATE_THUMBPRINT"; // Replace with actual thumbprint
            string userName = "DOMAIN\\Username"; // Replace with actual username

            // Find the client certificate
            X509Certificate2 clientCertificate = FindCertificateByThumbprint(certificateThumbprint);

            if (clientCertificate != null)
            {
                // Create a CertificateMapping object
                CertificateMapping mapping = new CertificateMapping();

                // Set the certificate and user account
                mapping.SetCertificate(clientCertificate);
                mapping.SetUserAccount(userName);

                // Configure the certificate store for the mapping
                mapping.StoreName = "My";
                mapping.StoreLocation = StoreLocation.LocalMachine;

                // In a real scenario, you would typically integrate this mapping
                // with your SSL/TLS server configuration. For demonstration,
                // we'll just show how to access the configured details.

                Console.WriteLine($"Certificate Mapping Created:");
                Console.WriteLine($"  Issuer: {mapping.Issuer}");
                Console.WriteLine($"  Subject: {mapping.SubjectDistinguishedName}");
                Console.WriteLine($"  Mapped to User: {mapping.GetUserAccount()}");
                Console.WriteLine($"  Certificate Store: {mapping.StoreName} ({mapping.StoreLocation})");
            }
            else
            {
                Console.WriteLine($"Client certificate with thumbprint '{certificateThumbprint}' not found.");
            }
        }
        catch (Exception ex)
        {
            Console.WriteLine($"An error occurred: {ex.Message}");
        }
    }

    // Helper method to find a certificate by thumbprint
    private static X509Certificate2 FindCertificateByThumbprint(string thumbprint)
    {
        using (var store = new X509Store(StoreName.My, StoreLocation.LocalMachine))
        {
            store.Open(OpenFlags.ReadOnly);
            X509Certificate2Collection certificates = store.Certificates.Find(X509FindType.FindByThumbprint, thumbprint, false);

            if (certificates.Count > 0)
            {
                return certificates[0];
            }
            return null;
        }
    }
}