Skip to main content

All Questions

Tagged with
1 vote
1 answer
63 views

Trying to create a .crt and .key for apache using certutil/certreq end up with empty files

I have this cert_functions.ps1 file $ErrorActionPreference = "Stop" $PSDefaultParameterValues['*:ErrorAction']='Stop' function New-WorkstationCertificateRequestConfiguration { param( ...
Daviid's user avatar
  • 118
0 votes
0 answers
515 views

Windows certutil exports with empty password but openssl pkcs12 fails

Here are the commands I follow to create a certificate and accept it usin Windows Server's CA Server. certreq -new -f -q $answerFile.FullName $requestFile.FullName certreq -submit -f -q -config $...
Daviid's user avatar
  • 118
0 votes
1 answer
271 views

Using certutil certificate in apache, missing key

$ConfigContent = @" ; Request.inf [Version] Signature="`$Windows NT$" [NewRequest] Subject = "CN=$CN,C=ES,ST=Barcelona,L=Barcelona,O=$O" KeySpec = 1 KeyLength = 2048 ...
Daviid's user avatar
  • 118
2 votes
2 answers
2k views

How to automatically compare current windows root certificate store against latest root certificates?

I do have a provider that complains the trusted root certificates on our several windows server systems (2008, 2012, 2016, 2019) are outdated. I was not able to prove the opposite. For sure "Turn ...
I grok it's user avatar
0 votes
1 answer
724 views

Trying to revoke locally-generated certificate : No local CA error

For some automated tests on my project, I need to revoke a certificate which has been generated locally by makecert.exe. First, I generate a signer certificate and associated CRL using the following ...
bumbling-tadpole's user avatar
2 votes
1 answer
798 views

Paginate results of certutil -view

I'm using the following command to get a list of issued certificates in a Windows Server machine with Active Directory Certificate Services (ADCS) installed. certutil -restrict 'Disposition=20' -out '...
James's user avatar
  • 661
3 votes
1 answer
12k views

Import certificate to Trusted Root Authorities for the Current User, with command line

I know how to import certificates to trusted root authorities with certutil certutil -addstore "Root" <cert_path> But for this I need administrator permissions. Though when I double ...
João Pimentel Ferreira's user avatar
0 votes
1 answer
1k views

Disabling Certutil

I am wondering what are the consequences of disabling certutil.exe on windows systems. It seems that this option isn't event considered in the documentation or forums. Can someone please elaborate ...
Karma2402's user avatar
2 votes
1 answer
843 views

CertUtil: ERROR_INVALID_ACL (0x80070538) exception when trying to install root certificate on Windows

I have a program that installs a certificate to Trusted Root (with user's consent). However, some of the users are unable to use my software due to an exception that occures whenever a command to add ...
alexalok's user avatar
0 votes
1 answer
10k views

User Certificate's show "Cannot find the certificate and private key for decryption." in Windows

Have a number of computers where user certificates suddenly stop working. Running certutil -silent -user -store my shows that all user certificates for the affected user have stopped working. my ...
Malcolm McCaffery's user avatar
2 votes
0 answers
6k views

certmgr.exe does not work expectedly in command line mode?

I'm trying to run the MSDN's sample about WCF basic message security using Certificate. In the setup.bat file, there is this line of command: certmgr.exe -add -r LocalMachine -s My -c -n %SERVER_NAME%...
Hopeless's user avatar
  • 263
3 votes
2 answers
14k views

Import self-signed certificate with private key on Windows from command prompt

Using inetmgr, I made a pfx file containing the public and private keys for a certificate. Now I'm trying to install the pfx into another machine from the command prompt with certutil -p <password&...
user1058410's user avatar
2 votes
2 answers
3k views

Removing one of two certificates with equal nicknames

I have two certificates installed: kirrun@kirNote ~ [1197]% certutil -d sql:/home/kirrun/.pki/nssdb -L Certificate Nickname Trust Attributes ...
kirelagin's user avatar
  • 2,882
6 votes
2 answers
16k views

Install a PKCS#12 Certificate into firefox from the command line

I am trying to use certutil to add a client certificate to the firefox db: The purpose of this certificate is to authenticate with a server - the server asks for credentials, this certificate contains ...
Derek Ekins's user avatar
2 votes
3 answers
19k views

Installing/deleting root certificate without CertMgr / CertUtil asking the end-user for confirmation

When you install or delete a root CA certificate using the commandline tools CertUtil.exe or CertMgr.exe, Windows asks the user for confirmation using a MessageBox (for certificates other than root CA ...
Jeroen Wiert Pluimers's user avatar