Can Postman support mTLS using client-cert in Windows certificate store?

Help Hub
,
1

The status of this issue in GitHub: [Feature Request] Use Windows certificate store as a source for client certificate · Issue #9483 · postmanlabs/postman-app-support is Closed as completed. However, related/merged issue: Feature Request : Native App - Read Client Certificate from Cert Store · Issue #5930 · postmanlabs/postman-app-support is Open.

Which is it? Does this feature exist? It seems that Postman is using the Windows certificate store for trust without any configuration. But when I call an mTLS enpoint, it does not prompt for client certificate and the call fails. Using a browser, I am able to connect to that same endpoint after selecting a client certificate.

The client cert is non-exportable. I cannot add it to Postman manually.

Is this a supported feature or no? I can’t find any documentation around what support exists for the native windows certificate store. Any help is appreciated.

2

I was mistaken, there does not appear to be any support for native OS certificate stores in Postman. SSL verification defaults to disabled globally. Once enabled, it seems clear that postman is not using the OS certificate store at all. Therefore I conclude Postman is unusable for my scenario without additional tooling.