Relate to: Security, System Management, Console

Default location: %WinDir%\System32\certreq.exe

Useful information about: certreq.exe

Description: CertReq.exe

Version: 6.0.6000.16386 (vista_rtm.061101-2205)

Size: 213504 (208K)

MD5: EA71C59C0FD87A63175396E5F5C8CCE9

CertReq.exe is a command-line program that is installed as part of Certificate Services Management Tools.

Certreq.exe is used for:

• Create new certificate requests. This includes the generation of key material that corresponds to the certificate request.

• Apply policies to a certificate request. This applies to CA certificates where various constraints are required. Since you cannot include certificate policies in the certificate request that is created by a CA, you have to apply the policy to the CA certificate request explicitly.

• Submit certificate requests to a certification authority. This feature also works with remote certification authorities, so that you can submit a request via the network to a remote CA.

• Retrieve certificates from a CA. Based on the certificate request ID, you can retrieve any certificate from a CA and save it to a file.

• Accept (and install) certificates or responses. This command is intended to accept a certificate or a response that contains a certificate. Once you have created a certificate request with certreq.exe, it remains in a pending state on your computer until you install the certificate that corresponds to the request.

• Sign certificate requests. In the case where the certificate template administrator has set the number of certificate enrollment agent signatures to a value greater than zero, you can sign certificate requests with this option.

Usage:

CertReq -?

CertReq [-v] -?

CertReq [-Command] -?

CertReq [-Submit] [Options] [RequestFileIn [CertFileOut [CertChainFileOut [Ful

lResponseFileOut]]]]

Submit a request to a Certification Authority.

Options:

-attrib AttributeString

-binary

-config ConfigString

-crl

-rpc

-AdminForceMachine

CertReq -Retrieve [Options] RequestId [CertFileOut [CertChainFileOut [FullResp

onseFileOut]]]

Retrieve a response to a previous request from a Certification Authority.

Options:

-binary

-config ConfigString

-crl

-rpc

-AdminForceMachine

CertReq -New [Options] [PolicyFileIn [RequestFileOut]]

Create a new request as directed by PolicyFileIn

Options:

-attrib AttributeString

-binary

-cert CertId

-config ConfigString

-user

-machine

-xchg ExchangeCertFile

CertReq -Accept [Options] [CertChainFileIn | FullResponseFileIn | CertFileIn]

Accept and install a response to a previous new request.

Options:

-user

-machine

CertReq -Policy [Options] [RequestFileIn [PolicyFileIn [RequestFileOut [PKCS10

FileOut]]]]

Construct a cross certification or qualified subordination request

from an existing CA certificate or from an existing request.

Options:

-attrib AttributeString

-binary

-cert CertId

-noEKU

-alt

-hash HashAlgorithm

CertReq -Sign [Options] [RequestFileIn [RequestFileOut]]

Sign a certificate request with an enrollment agent or qualified

subordination signing certificate.

Options:

-binary

-cert CertId

-crl

-noEKU

-hash HashAlgorithm

Read more: http://technet2.microsoft.com/WindowsSer...

Slow computer? Get rid of a Virus/Trojan/Adware/Spyware/Rootkit? Try RegRun for free. It helps...