Home > Commands A-M > Commands Ca-Cg

CERTREQ POLICY


Description | Syntax | Parameters | Switches | Related | Notes | Examples | Errorlevels | Availability

To construct a cross-certification or qualified subordination request from an existing CA certificate or request.


Syntax

CERTREQ [-policy] [/?]

CERTREQ -policy [-attrib attribute_string] [-binary] [-cert certificate_id] [request_input_file [policy_input_file [request_output_file [pkcs10_output_file]]]]


Parameters
pkcs10_output_file (NT2003)
Specifies the base64-encoded PKCS #10 file to which you want to send output.
policy_input_file (NT2003)
Specifies the .inf input file that contains the extension definitions that you want to use to qualify a request.
request_input_file (NT2003)
Specifies the base64-encoded or binary input file that you want to use. The file can be a PKCS #10 certificate request, PKCS #7 certificate renewal request, KEYGEN tag format certificate request, a Certificate Management protocol using Cryptographic Message Syntax (CMS) request (AKA CMC), or a certificate file of the CA that you want to cross-certify.
request_output_file (NT2003)
Specifies the base64-encoded file to which you want to send output.

Switches
/? (NT2003)
Display cluster group syntax. Default.
-attrib attribute_string (NT2003)
Specifies the Name and Value string pairs, separated by a colon. Separate Name and Value string pairs with \n (ie. Name1: Value1\n Name2: Value2).
-binary (NT2003)
Formats output files as binary instead of base64-encoded.
-cert certificate_id (NT2003)
Specifies the signing certificate by common name, serial number, Secure Hash Algorithm (SHA-1) key, or certificate hash.
-policy (NT2003)
Sets the policy for a request.

Related

CERTREQ ACCEPT
CERTREQ NEW
CERTREQ RETRIEVE
CERTREQ SIGN
CERTREQ SUBMIT


Notes

none.


Examples

none.


Errorlevels

none.


Availability
External
DOS
none
Windows
none
Windows NT
NT2003