Questions tagged [certutil]

Certutil.exe is a command-line program that is installed as part of Certificate Services. You can use Certutil.exe to dump and display certification authority (CA) configuration information, configure Certificate Services, backup and restore CA components, and verify certificates, key pairs, and certificate chains.

Filter by
Sorted by
Tagged with
0
votes
0answers
33 views

Certutil intended purposes

On some systems where we're deploying our software, we're told that it is missing a certificate that necessary to verify our code is correctly signed. I'd like to add this certificate in our (nsis) ...
0
votes
1answer
123 views

Disabling Certutil

I am wondering what are the consequences of disabling certutil.exe on windows systems. It seems that this option isn't event considered in the documentation or forums. Can someone please elaborate ...
1
vote
1answer
67 views

get the hash of a string and eventually compare it to a hash

I want to run a one-liner to enable me to get the hash of a string and eventually compare it to a hash I can just copy at the end of the command later. I'm confident I can figure out how to do the ...
2
votes
1answer
261 views

CertUtil: ERROR_INVALID_ACL (0x80070538) exception when trying to install root certificate on Windows

I have a program that installs a certificate to Trusted Root (with user's consent). However, some of the users are unable to use my software due to an exception that occures whenever a command to add ...
0
votes
1answer
570 views

CertUtil | How CertUtil -verifykeys works internally?

I have a CA certificate in Local Machine Certificate Store. When I run this command - enter code here certutil -verifyKeys gives Key "KEYNAME" verifies as the public key for Certificate "KEYNAME" ...
0
votes
1answer
81 views

Gpg4win download integrity check

I just downloaded gpg4win onto Windows 8. I wanted to check the integrity, and apparently you can do so with certutil. So I navigated to my downloads folder and typed: C:\Users\xxx\Downloads> ...
3
votes
1answer
1k views

Is it possible to encode a file with certutil without creating new file?

I'm encoding files with following command: certutil -encode inputFileName encodedOutputFileName However, this creates a new file on the system. Is it possible to print encoded data on command line ...
0
votes
1answer
3k views

User Certificate's show “Cannot find the certificate and private key for decryption.” in Windows

Have a number of computers where user certificates suddenly stop working. Running certutil -silent -user -store my shows that all user certificates for the affected user have stopped working. my ...
1
vote
0answers
791 views

Availbility of certutil on different Windows versions

I have a bit confused about Certutil.exe. I have read the information in the link Server 2012/Windows 8 certutil documentation: Certutil.exe is a command-line program that is installed as part of ...
0
votes
1answer
2k views

Athena ID Protect v2 Token triggers Select Card dialog on PKCS#11 C_Login

I am playing around with an Athena IDProtect v2 Token from NXP (the one compatible with the IDProtect Laser product line) on Windows 10 Pro (x64 german). After installing the Athena client middle ...
2
votes
1answer
8k views

How to install CertUtils to Windows 7?

It seems that my version of Windows 7 (SP1, with PowerShell 4) lacks the certutil command. I tried to look for a way to add it manually but failed. Any ideas on how to do it? UPDATE Thanks to ...
2
votes
0answers
3k views

certmgr.exe does not work expectedly in command line mode?

I'm trying to run the MSDN's sample about WCF basic message security using Certificate. In the setup.bat file, there is this line of command: certmgr.exe -add -r LocalMachine -s My -c -n %SERVER_NAME%...
2
votes
2answers
8k views

Import self-signed certificate with private key on Windows from command prompt

Using inetmgr, I made a pfx file containing the public and private keys for a certificate. Now I'm trying to install the pfx into another machine from the command prompt with certutil -p <password&...
1
vote
1answer
5k views

How to use certutil -exportPFX to export certificates from “Certifiate Enrollment Requests” store?

I have Windows Server 2008. I am trying to write a script to export my certificate request private keys. I wanted to use the powershell cmdlet Export-PfxCertificate to export my certificate request's ...
0
votes
1answer
2k views

How to extract “Issued To” with “certutil -store -my”?

I am trying to script a report on certificate usage for a specific app, and those certs are all part of the output of "certutil -store -my" (Web Server 2008 R2). However the "issued-to" field is not ...
2
votes
2answers
2k views

Removing one of two certificates with equal nicknames

I have two certificates installed: kirrun@kirNote ~ [1197]% certutil -d sql:/home/kirrun/.pki/nssdb -L Certificate Nickname Trust Attributes ...
0
votes
1answer
298 views

Self-Signed certificate for LDAP on Sun Directory Server

I am wondering if some one could provide me with steps to self-signed certificate using certutil. I want the cert for Sun Directory Server 5.2 Patch 6.
5
votes
2answers
10k views

Install a PKCS#12 Certificate into firefox from the command line

I am trying to use certutil to add a client certificate to the firefox db: The purpose of this certificate is to authenticate with a server - the server asks for credentials, this certificate contains ...
2
votes
2answers
15k views

Installing/deleting root certificate without CertMgr / CertUtil asking the end-user for confirmation

When you install or delete a root CA certificate using the commandline tools CertUtil.exe or CertMgr.exe, Windows asks the user for confirmation using a MessageBox (for certificates other than root CA ...