Previous Topic: How the Digitally Signed Inventory Files Are VerifiedNext Topic: cacertutil import—Import a Certificate


cacertutil create—Create a Certificate

The cacertutil create command creates a certificate.

This command has the following format:

cacertutil create -o:filename -op:passphrase -s:subject -od:filename
-o:filename

Specify the output filename of the certificate.

-op:passphrase

Specify a passphrase to encrypt the certificate.

-s:subject

Specify the subject name to whom the certificate is issued.

-od:filename

Create a DER encoded file with just the public certificate.

Example: Create a Certificate

This example creates two files AssetCollectorCert.p12 and AssetCollectorCert.der. The .der file contains only the public part of the certificate and must be copied on to the Asset Collector computer where the signature is to be verified.

cacertutil create -o:c:\AssetCollectorCert.p12 -op:password -s:”CN=AssetCollector,O=Computer Associates,c=US” -od:c:\AssetCollectorCert.der

Note: For more information about cacertutil commands, see the Command Line Reference Guide.