Has anyone gotten CF Admin (tomcat) to use the local Windows Certificate Store for a certificate instead of a Java keystore? I'm trying the following without any luck: https://stackoverflow.com/questions/37929887/configuring-tomcat-to-use-windows-certificate-store-for-ssl

What are you trying to do? For outbound TLS connections (like for cfhttp / cftp)?

Nope, to host the internal

/CFIDE/administrator/

using our Windows cert infrastructure.

If you are using IIS -- it owns all the TLS/SSL infrastructure either way. The Java Key Store is really only used for outbound communications, unless you accessing the jetty server built-in.

The CFIDE is blocked on our IIS sites, so we leave the internal server (tomcat) running and bound to an internal IP. So the trick is getting that tomcat server to see the Windows cert store.

Gotcha. The only time I've seen something like that was a powershell script that synced the windows cert store with Tomcat on a schedule. It was also kinda dangerous because it had to extract all the private keys out of there as well.