Register:
Certutil -setreg CA\DSConfigDN „CN=Configuration,DC=Fabrikam,DC=com“
(aproved)
CRL:
Certutil -setreg CA\CRLPeriodUnits 1
Certutil -setreg CA\CRLPeriod Weeks
Certutil -setreg CA\CRLDeltaPeriodUnits 0
(aproved)
CRL Overlap:
Certutil -setreg CA\CRLOverlapPeriodUnits 48
Certutil -setreg CA\CRLOverlapPeriod Hours
(aproved)
Max Period:
Certutil -setreg CA\ValidityPeriodUnits 5
Certutil -setreg CA\ValidityPeriod Years
(aproved)
AIA:
certutil -setreg CA\CACertPublicationURLs „1:C:\Windows\system32\CertSrv\CertEnroll\%1_%3%4.crt\n2:ldap:///CN=%7,CN=AIA,CN=Public Key Services,CN=Services,%6%11\n2:http://pki.fabrikam.com/CertEnroll/%1_%3%4.crt“
(not aproved)
PKI – Nützliche Befehle