CERTMGR(8)

NAME
certmgr - Utility for manage certificates, certificate revocation lists (CRL) and stores.

SYNOPSIS
certmgr -command [-options]

certmgr -help

certmgr -install [-store] [-file] [-cont] [-pin] [-crl | -cert | -pfx] [-at_signature] [-provname] [-provtype]

certmgr -list [-store | -file | -cont] [-crl | -cert] [-dn | -thumbprint] [-verbose]

certmgr -decode -src -dest [-der | -base64]

certmgr -export [-store | -cont] [-dest] [-base64] [-crl | -cert | -pfx] [-dn | -thumbprint] [-at_signature] [-provname] [-provtype] [-silent]

certmgr -delete [-store | -cont] [-crl | -cert] [-dn | -thumbprint] [-provname] [-provtype] [-all] [-silent]

certmgr -enumstores user | machine | all_locations

DESCRIPTION
certmgr is the command prompt utility for managing certificates, certificate revocation lists (CRL) and stores. It can install, uninstall, decode, export and show certificates or CRLs from file, system store or key container.

COMMAND
You can use only one command per certmgr call. Command shall precede options.

-help
    Print a help page. You can also add -help as option to any command to get help on specific command. Note that command line help is more detailed. On the other hand this manual provides steady interface that shall not be changed in future.

-install
    Install certificate or CRL to store. Make the reference from certificate to private key if necessary.

-list
    List to stdout certificate or CRL from store, file or container.

-decode
    Decode certificate or CRL from der encoding to base64 or back

-export
    Export certificate or CRL from store or container to file.

-delete
    Delete certificate or CRL from store.

-enumstores
    Enumerate stores in selected location.

OPTIONS
There are no differences between long (--) and short (-) options. The order of options is not defined.

-at_signature
    Use AT_SIGNATURE private key instead of AT_KEYEXCHANGE.

-ask-cont
    Ask user to specify container from the list of available containers.

-base64
    Decode certificate or CRL to base64 encoding.

-cont container
    Name of container with certificate and private key. The name have format \\.\reader\name. If options file was not set private key and certificate will be taken from this container. The container can be string 'skip' that means do not make reference in certificate to private key.

-cert
    Use certificate (default).

-crl
    Use certificate revocation list instead of certificate.

-pfx
    Use pfx / PKCS#12 file.

-silent
    Silent mode. Use only one matched certificate or CRL, return error if found more then one. Return error if need more strong criteria.

-all
    Use all matched certificates or CRLs.

-der
    Decode certificate or CRL to der encoding (default).

-dest path
    File for decoded certificate or CRL.

-dn field=value,...
    Search criteria for certificate. If there are more than one certificate match given criteria, user will be prompt to choose one.

-file path
    Path to file with certificate or CRL. Can be der or base64 encoded or serialized store.

-provname name
    Provider name.

-provtype type
    Provider type (default 80).

-help
    Print help about given command.

-pin pincode
    Pin code to container.

-src_file path
    File with certificate or CRL for decode.

-thumbprint hash
    Certificate thumbprint for filtering.

-verbose
    Print extended information about certificate.

-store name
    Name begins with 'u' or 'm', and it means use the current user store and machine store respectively and the name will be the string exclude this first character. Usage without 'u' or 'm' prefix is deprecated. There are some predefined stores. My - for user certificates, Root-for root CA certificates, CA-for intermediate CA certificates and CRL, AddressBook-for other users certificates, Cache-cache store for certificate or CRL (only read and delete is avaliable). uMy is default value.

RETURN VALUE
certmgr returns zero on success and non-zero error code on error.

EXAMPLES
certmgr -install -store uMy -file /media/floppy/testuser.cer -cont '\\.\FAT12_0\31cc730c-e57e-4b56-8014-9b8f2ab79d6d'

Install certificate from file testuser.cer to user store My with reference to private key.

certmgr -decode -src /media/floppy/testuser.cer -dest /media/floppy/testuser_base64.cer -base64

Decode certificate from file testuser.cer to base64 encoding and put it in testuser_base64.cer.

certmgr -export -crl -store mCA -dest /media/floppy/root.crl

Export CRL from machine store CA to file root.crl

certmgr -enumstores user

Enumerate current user stores.

FILES

/opt/cprocsp/bin/(arch)/certmgr
    certmgr executable file

BUGS
There are no known bugs.

AUTHOR
Afanasiev Kirill, Belyaev Anatoly, Leontiev Sergey, Rusev Andrey, Usanova Tatiana, Vorobjev Simon, Zubov Ivan

COPYRIGHT AND LICENSE
Copyright "CryptoPro"(C) 2007-2021. All rights reserved.