Certutil

Applies To: Windows Server 2008

Certutil.exe is a command-line program that is installed as part of Certificate Services. You can use Certutil.exe to dump and display certification authority (CA) configuration information, configure Certificate Services, back up and restore CA components, and verify certificates, key pairs, and certificate chains.

For examples of how to use this command, see Examples.

Syntax

	$lib:\\certutil.bmp$ Copy Code
Certutil <-parameter> [-parameter]

Parameters

Description

	$lib:\\certutil1.bmp$ Copy Code
-dump

Dump configuration information or files

	$lib:\\certutil2.bmp$ Copy Code
-asn

Parse ASN.1 file

	$lib:\\certutil3.bmp$ Copy Code
-decodehex

Decode hexadecimal-encoded file

	$lib:\\certutil4.bmp$ Copy Code
-decode

Decode a Base64-encoded file

	$lib:\\certutil5.bmp$ Copy Code
-encode

Encode a file to Base64

	$lib:\\certutil6.bmp$ Copy Code
-deny

Deny a pending certificate request

	$lib:\\certutil7.bmp$ Copy Code
-resubmit

Resubmit a pending certificate request

	$lib:\\certutil8.bmp$ Copy Code
-setattributes

Set attributes for a pending certificate request

	$lib:\\certutil9.bmp$ Copy Code
-setextension

Set an extension for a pending certificate request

	$lib:\\certutil10.bmp$ Copy Code
-revoke

Revoke a certificate

	$lib:\\certutil11.bmp$ Copy Code
-isvalid

Display the disposition of the current certificate

	$lib:\\certutil12.bmp$ Copy Code
-getconfig

Get the default configuration string

	$lib:\\certutil13.bmp$ Copy Code
-ping

Attempt to contact the Active Directory Certificate Services Request interface

	$lib:\\certutil14.bmp$ Copy Code
-pingadmin

Attempt to contact the Active Directory Certificate Services Admin interface

	$lib:\\certutil15.bmp$ Copy Code
-CAInfo

Display information about the certification authority

	$lib:\\certutil16.bmp$ Copy Code
-ca.cert

Retrieve the certificate for the certification authority

	$lib:\\certutil17.bmp$ Copy Code
-ca.chain

Retrieve the certificate chain for the certification authority

	$lib:\\certutil18.bmp$ Copy Code
-GetCRL

Get a certificate revocation list (CRL)

	$lib:\\certutil19.bmp$ Copy Code
-CRL

Publish new certificate revocation lists (CRLs) [or only delta CRLs]

	$lib:\\certutil20.bmp$ Copy Code
-shutdown

Shutdown Active Directory Certificate Services

	$lib:\\certutil21.bmp$ Copy Code
-installCert

Install a certification authority certificate

	$lib:\\certutil22.bmp$ Copy Code
-renewCert

Renew a certification authority certificate

	$lib:\\certutil23.bmp$ Copy Code
-schema

Dump the schema for the certificate

	$lib:\\certutil24.bmp$ Copy Code
-view

Dump the certificate view

	$lib:\\certutil25.bmp$ Copy Code
-db

Dump the raw database

	$lib:\\certutil26.bmp$ Copy Code
-deleterow

Delete a row from the server database

	$lib:\\certutil27.bmp$ Copy Code
-back up

Backup Active Directory Certificate Services

	$lib:\\certutil28.bmp$ Copy Code
-backupDB

Backup the Active Directory Certificate Services database

	$lib:\\certutil29.bmp$ Copy Code
-backupKey

Backup the Active Directory Certificate Services certificate and private key

	$lib:\\certutil30.bmp$ Copy Code
-restore

Restore Active Directory Certificate Services

	$lib:\\certutil31.bmp$ Copy Code
-restoreDB

Restore the Active Directory Certificate Services database

	$lib:\\certutil32.bmp$ Copy Code
-restoreKey

Restore the Active Directory Certificate Services certificate and private key

	$lib:\\certutil33.bmp$ Copy Code
-dynamicfilelist

Display a dynamic file list

	$lib:\\certutil34.bmp$ Copy Code
-databaselocation

Display database locations

	$lib:\\certutil35.bmp$ Copy Code
-hashfile

Generate and display a cryptographic hash over a file

	$lib:\\certutil36.bmp$ Copy Code
-store

Dump the certificate store

	$lib:\\certutil37.bmp$ Copy Code
-addstore

Add a certificate to the store

	$lib:\\certutil38.bmp$ Copy Code
-delstore

Delete a certificate from the store

	$lib:\\certutil39.bmp$ Copy Code
-verifystore

Verify a certificate in the store

	$lib:\\certutil40.bmp$ Copy Code
-repairstore

Repair a key association or update certificate properties or the key security descriptor

	$lib:\\certutil41.bmp$ Copy Code
-viewstore

Dump the certificates store

	$lib:\\certutil42.bmp$ Copy Code
-viewdelstore

Delete a certificate from the store

	$lib:\\certutil43.bmp$ Copy Code
-dsPublish

Publish a certificate or certificate revocation list (CRL) to Active Directory

	$lib:\\certutil44.bmp$ Copy Code
-Template

Display certificate templates

	$lib:\\certutil45.bmp$ Copy Code
-TemplateCAs

Display the certification authorities (CAs) for a certificate template

	$lib:\\certutil46.bmp$ Copy Code
-CATemplates

Display the certificate templates for a certification authority (CA)

	$lib:\\certutil47.bmp$ Copy Code
-InstallDefaultTemplates

Install default certificate templates

	$lib:\\certutil48.bmp$ Copy Code
-URLCache

Display or delete URL cache entries

	$lib:\\certutil49.bmp$ Copy Code
-pulse

Pulse auto enrollment events

	$lib:\\certutil50.bmp$ Copy Code
-MachineInfo

Display information about the Active Directory machine object

	$lib:\\certutil51.bmp$ Copy Code
-DCInfo

Display information about the domain controller

	$lib:\\certutil52.bmp$ Copy Code
-EntInfo

Display information about an enterprise CA

	$lib:\\certutil53.bmp$ Copy Code
-TCAInfo

Display information about the CA

	$lib:\\certutil54.bmp$ Copy Code
-SCInfo

Display information about the smart card

	$lib:\\certutil55.bmp$ Copy Code
-SCRoots

Manage smart card root certificates

	$lib:\\certutil56.bmp$ Copy Code
-verifykeys

Verify a public or private key set

	$lib:\\certutil57.bmp$ Copy Code
-verify

Verify a certificate, certificate revocation list (CRL), or certificate chain

	$lib:\\certutil58.bmp$ Copy Code
-sign

Re-sign a certificate revocation list (CRL) or certificate

	$lib:\\certutil59.bmp$ Copy Code
-vroot

Create or delete web virtual roots and file shares

	$lib:\\certutil60.bmp$ Copy Code
-vocsproot

Create or delete web virtual roots for an OCSP web proxy

	$lib:\\certutil61.bmp$ Copy Code
-oid

Display the object identifier or set a display name

	$lib:\\certutil62.bmp$ Copy Code
-error

Display the message text associated with an error code

	$lib:\\certutil63.bmp$ Copy Code
-getreg

Display a registry value

	$lib:\\certutil64.bmp$ Copy Code
-setreg

Set a registry value

	$lib:\\certutil65.bmp$ Copy Code
-delreg

Delete a registry value

	$lib:\\certutil66.bmp$ Copy Code
-ImportKMS

Import user keys and certificates into the server database for key archival

	$lib:\\certutil67.bmp$ Copy Code
-ImportCert

Import a certificate file into the database

	$lib:\\certutil68.bmp$ Copy Code
-GetKey

Retrieve an archived private key recovery blob

	$lib:\\certutil69.bmp$ Copy Code
-RecoverKey

Recover an archived private key

	$lib:\\certutil70.bmp$ Copy Code
-MergePFX

Merge PFX files

	$lib:\\certutil71.bmp$ Copy Code
-ConvertEPF

Convert a PFX file into an EPF file