[其他] CertMig - cert 证书导入与导出工具

CertMig Command Line Utility - 2010 Simon Jarvis(c) wintools.com.au

CertMig.exe is a utility for exporting and importing all your personal
Certificatesfrom a command line prompt or administrative script.

Supported operating systems:
Windows 2000 Profressional/Server
Windows XP Professional
Windows Vista (Professional/Business/Enterprise)
Windows 7 (Professional/Business/Enterprise)
Windows 2003 Server
Windows 2008 Server

Usage: CertMig.exe <options>
Options:
        -e <folder>     The directory the certificates are exported to.
        -i <folder>     The directory/filename of certificates to be import
        -s <store>      Store is my, ca or svc (Optional, defaults to my).
        -p <password>   Password used for the PFX files (Optional).
        -X509           Export certificates in X509 base64 format (Optional

        -all            Export all certificates in the store (Optional).

Valid Store parameters are:
        MY      - (default) Current user personal certificates
        CA      - Local machine imported certificates
        SVC     - Local Service imported certificates

If a password is not specified then the password will be set to the exporte
filename less extension.

Example: Test.pfx password is PC-201106150228_Test

Exported file format:
        ComputerName_CertificateFriendlyName.pfx
        ComputerName_CertificateFriendlyName.cer

Default PFX file password (pfx files only):
        ComputerName_CertificateFriendlyName

If muliple certificates exist with the same name, a numeric value will
be appended to the file.

If the certificate friendly name has invalid file name characters
such as /\:*?"<>, they are cleared from the outputed file name only.

Importing certificates folder or filename can contain wildcards.
Example:
        CertMig.exe -i c:\temp\*.pfx -s MY

If no password is specified on the import, CertMig.exe the default password
format is tried.

Note when exporting in base64 X509 certificate format, PFX (private key
certificates) will be exported in PKCS #12 format and not base64.