CERTREQ POLICY

To construct a cross-certification or qualified subordination request from an existing CA certificate or request.

CERTREQ [-policy] [/?]

CERTREQ -policy [-attrib attribute_string] [-binary] [-cert certificate_id] [request_input_file [policy_input_file [request_output_file [pkcs10_output_file]]]]

pkcs10_output_file (NT2003)

Specifies the base64-encoded PKCS #10 file to which you want to send output.

policy_input_file (NT2003)

Specifies the .inf input file that contains the extension definitions that you want to use to qualify a request.

request_input_file (NT2003)

Specifies the base64-encoded or binary input file that you want to use. The file can be a PKCS #10 certificate request, PKCS #7 certificate renewal request, KEYGEN tag format certificate request, a Certificate Management protocol using Cryptographic Message Syntax (CMS) request (AKA CMC), or a certificate file of the CA that you want to cross-certify.

request_output_file (NT2003)

Specifies the base64-encoded file to which you want to send output.

/? (NT2003)

Display cluster group syntax. Default.

-attrib attribute_string (NT2003)

Specifies the Name and Value string pairs, separated by a colon. Separate Name and Value string pairs with \n (ie. Name1: Value1\n Name2: Value2).

-binary (NT2003)

Formats output files as binary instead of base64-encoded.

-cert certificate_id (NT2003)

Specifies the signing certificate by common name, serial number, Secure Hash Algorithm (SHA-1) key, or certificate hash.

-policy (NT2003)

Sets the policy for a request.

CERTREQ ACCEPT
CERTREQ NEW
CERTREQ RETRIEVE
CERTREQ SIGN
CERTREQ SUBMIT

none.

none.

none.

External

DOS

none

Windows

none

Windows NT

NT2003