Quantcast
Channel: Security forum
Viewing all articles
Browse latest Browse all 12072

Import intermediate certficate - .p7b format - into local computer store --- command line option

$
0
0

My objective is to import an intermediate certificate (provided by a 3rd party CA) into the local computer store of an Exchange server.

This is an intermediate certificate that apparently must be installed before the certificate issued to my organization.

It is in the .p7b format.

I want to use the command line to do this (essentially to become more proficient with this option for possible future Scripting).

OK

I know about the certuil command. I know that certutil is often followed by the -addstore parameter for certificate importing:

certutil -addstore

So if we want to import a cert into the root store:

certutil -addstore -f Root mycert.crt

For the intermediate cert store (the one that interests me here), we would do this:

certutil -addstore -f CA mycert.crt

*

OK, so what's the problem?

*

Well, I read here...

http://social.technet.microsoft.com/wiki/contents/articles/3063.certutil-examples-for-managing-active-directory-certificate-services-ad-cs-from-the-command-line.aspx

That you would in fact use "-addstore" for a .cer cert (and apparently .crt cert) but... -importpfx when importing a certificate that contains the private key - usually or often the case for a .pfx file but not for a .cer file.

*

So now I'm unsure of what command(s) to use.

Which command is appropriate for a .p7b file then?

What if I want to import the private key as well? What is the parameter used to ensure that it is imported?


Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.


Viewing all articles
Browse latest Browse all 12072

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>