Re: Certutil -sign with more then one valid CA cert

From: Shreeniwas Kelkar [MSFT] (skelkar_at_online.microsoft.com)
Date: 01/25/05


Date: Mon, 24 Jan 2005 15:08:05 -0800

This is not possible in any released versions of the OS.

-- 
Shreeniwas Kelkar [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.
"Patrick Tronnier" <PatrickTronnier@discussions.microsoft.com> wrote in 
message news:F6F8D674-5D6D-4E3D-A7E8-0A9B7E29804E@microsoft.com...
> Greetings,
>
> Can the Certutil -slient -sign option somehow be told which CA cert to 
> use?
> I know Certificate Server is aware of which cert to use to sign a CRL 
> after
> the CA cert has been renewed with a new key pair. I am hoping Certutil has
> the same functionality.
> 


Relevant Pages

  • Re: Taking Ownership didnt help
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... >>Have you done a comparison of the thumbprint of the cert ... >>> successfully used it in the past to decrypt files. ...
    (microsoft.public.win2000.security)
  • Re: SCEP request denied by policy module
    ... This posting is provided "AS IS" with no warranties, ... I'm trying to request what it calls an identity cert. ...
    (microsoft.public.win2000.security)
  • Re: Can certutil -sign be used without prompting for the CA cert?
    ... clicking the right cert in the cert selection dialog? ... > command FAILED: 0x80092005 The object or property already ... > CertUtil: The object or property already exists. ... >> Shreeniwas Kelkar ...
    (microsoft.public.platformsdk.security)
  • Re: security event 537
    ... certutil -dspublish -f filename NTAuthCA ... the computer where you will perform certutil. ... Mike ... I then installed a new cert on my computer, ...
    (microsoft.public.windows.server.general)
  • Re: How to? Certificate Server 1.0 root certificate renewal
    ... I haven't tested this(exporting an Win2K ca cert back to NT4) but I ... think it should be workable by using certutil. ...
    (microsoft.public.inetserver.iis.security)