Tag Archives: PKI

Computer Certificate Enrollment and Renewal

Key-based renewal

certreq -machine -q -enroll -cert <thumbprint> renew



Locate enterprise CA

a) find out CA name and server

certutil -config - -ping

b) find out more info about CA and CA type

certutil – dump

In the output of the command above we can find out more information about the type of the CA (enterprise/standalone, root/subordinate…. see Types of Certification Authorities)

 certutil -cainfo -config <paste the config: line output from certutil -dump> type

Web based enrollment

URL of your Certificate Services server (eg https://ca-server/certsrv).


via Test Lab Guide: Demonstrating Certificate Key-Based Renewal, Renew a certificate, Requesting a certificate from a local certification authority, Test Lab Guide: Demonstrating Certificate Key-Based Renewal, Certification Authority Web Enrollment Guidance


CRL | Dmitrys PowerBlog: PowerShell and beyond

CRL | Dmitrys PowerBlog: PowerShell and beyond.


Tips, tricks and time-savers for the Windows and ConfigMgr administrator

To The Point

Anything about Technology and Business

Brian's Power Windows Blog

Microsoft in the Enterprise. Windows, Hyper-V, Exchange, SQL, and more!

PowerScripting Podcast

Shownotes and links for the PowerScripting Podcast, a podcast to help people learn Windows Powershell

Learn Powershell | Achieve More

What is this Powershell of which you speak?