(Node.js) Backup Windows Current User / Personal Certificates to a .zip

Demonstrates how to backup the certificates in the Windows registry-based Current User certificate store (in the "Personal" Logical Store as seen in certmgr.msc), to a zip archive. Certificates having an exportable private key are exported to .pfx files. Certificates with no private key, or with a non-exportable private key, are exported to .cer files.

Obviously, this example only runs on Windows computers.

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOS

var os = require('os');
if (os.platform() == 'win32') {  
  var chilkat = require('@chilkat/ck-node23-win64'); 
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node23-linux-arm');
    } else if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node23-linux-arm64');
    } else {
        var chilkat = require('@chilkat/ck-node23-linux-x64');
    }
} else if (os.platform() == 'darwin') {
  var chilkat = require('@chilkat/ck-node23-mac-universal');
}

function chilkatExample() {

    var certStore = new chilkat.CertStore();

    var readOnly = true;
    var success = certStore.OpenCurrentUserStore(readOnly);
    if (!success) {
        console.log(certStore.LastErrorText);
        return;
    }

    var pfxPassword = "secret";

    var allSuccess = true;
    var numSuccess = 0;

    // entry: ZipEntry
    var entry;
    var zip = new chilkat.Zip();
    zip.NewZip("qa_output/personalCerts.zip");

    var certData = new chilkat.BinData();
    var sbFilename = new chilkat.StringBuilder();

    // Iterate over the certificates in the Current User store.
    var numCerts = certStore.NumCertificates;
    var i = 0;
    while (i < numCerts) {
        // cert: Cert
        var cert = certStore.GetCertificate(i);
        console.log("DN = " + cert.SubjectDN);

        sbFilename.SetString("cert");
        sbFilename.AppendInt(i+1);

        var bHasPrivateKey = cert.HasPrivateKey();
        if ((bHasPrivateKey == true) && (cert.PrivateKeyExportable == true)) {
            // Export to a .pfx
            success = cert.ExportToPfxBd(pfxPassword,true,certData);
            if (success == true) {
                sbFilename.Append(".pfx");
                entry = zip.AppendBd(sbFilename.GetAsString(),certData);

            }

        }
        else {
            // Export to a .cer
            success = cert.ExportCertDerBd(certData);
            if (success == true) {
                sbFilename.Append(".cer");
                entry = zip.AppendBd(sbFilename.GetAsString(),certData);

            }

        }

        if (success !== true) {
            allSuccess = false;
        }
        else {
            numSuccess = numSuccess+1;
        }

        i = i+1;
    }

    if (numSuccess > 0) {
        success = zip.WriteZipAndClose();
        if (success !== true) {
            console.log(zip.LastErrorText);
            allSuccess = false;
        }

    }

    console.log("All success = " + allSuccess);

}

chilkatExample();