Skip to main content

Helpful Utilities

Below is a list of helpful Windows utilities:

ToolUsage, Comment
certlm.mscCertificate manager (local computer/machine)
certmgr.mscCertificate manager (current user)
certreq.exeCertreq can be used to request certificates from a certification authority (CA), to retrieve a response to a previous request from a CA, to create a new request from an .inf file, to accept and install a response to a request, to construct a cross-certification or qualified subordination request from an existing CA certificate or request, and to sign a cross-certification or qualified subordination request.
certutil.exeCertutil.exe is a command-line program that is installed as part of Certificate Services. You can use Certutil.exe to dump and display certification authority (CA) configuration information, configure Certificate Services, backup and restore CA components, and verify certificates, key pairs, and certificate chains.
E.g. to verify CRL, certificates:
certutil -URL “http://crl1.hsmdemo.test/certenroll/DEMO-CAR-CA.crl”
certutil -URL C:\issdemokey.cer
To dump requests and certificates:
certutil -dump <certificate.req/cer>
certutil -repairstore my *
gpmp.mscChange group policy management (e.g. password policy, …)
gpupdate.exeRefreshes the local computers policy and any Active Directory-based Group policies (e.g. gpupdate /force)
hsmcons.exe KSP/CNG test tool for the Primus HSM
(within the Debug Build Folder … \SecurosysPrimusKsp_v1.xx.y\bin\Debug\x86)
rsop.mscResultant Set of Policy utility, to check group policy