Certutil -sign with more then one valid CA cert

From: Patrick Tronnier (PatrickTronnier_at_discussions.microsoft.com)
Date: 01/24/05 

Date: Mon, 24 Jan 2005 08:39:06 -0800

Greetings,

Can the Certutil -slient -sign option somehow be told which CA cert to use?
I know Certificate Server is aware of which cert to use to sign a CRL after
the CA cert has been renewed with a new key pair. I am hoping Certutil has
the same functionality.

Relevant Pages

  • Re: Can certutil -sign be used without prompting for the CA cert?
    ... clicking the right cert in the cert selection dialog? ... > command FAILED: 0x80092005 The object or property already ... > CertUtil: The object or property already exists. ... >> Shreeniwas Kelkar ...
    (microsoft.public.platformsdk.security)
  • Re: security event 537
    ... certutil -dspublish -f filename NTAuthCA ... the computer where you will perform certutil. ... Mike ... I then installed a new cert on my computer, ...
    (microsoft.public.windows.server.general)
  • Re: How to? Certificate Server 1.0 root certificate renewal
    ... I haven't tested this(exporting an Win2K ca cert back to NT4) but I ... think it should be workable by using certutil. ...
    (microsoft.public.inetserver.iis.security)
  • Re: CAPI2 error 80093005
    ... E.g. w2k cert server, the cert is to install on IIS4.0 ... > newsgroup...I've radixed the stream and put any possible ... I've tried also with the certutil. ... >>> and using an external PKI. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Can certutil -sign be used without prompting for the CA cert?
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... > Deleting the old CA cert (which was showing in the cert selection dialog ... > Can the Certutil -slient -sign option somehow be told which CA cert to ... >>> Shreeniwas Kelkar ...
    (microsoft.public.platformsdk.security)