Was this page helpful?
Your feedback about this content is important. Let us know what you think.
Additional feedback?
1500 characters remaining
Export (0) Print
Expand All

Public Key Infrastructure (PKI) Cmdlets

Updated: September 25, 2015

Applies To: Windows 10, Windows 10 Technical Preview

Windows PowerShell® is a task-based command-line shell and scripting language designed especially for system administration. This reference topic for the information technology (IT) professional provides assistance in utilizing the Windows PowerShell cmdlets to script and automate tasks.

Public Key Infrastructure (PKI) Client

This reference provides cmdlet descriptions and syntax for all public key infrastructure (PKI) client-specific cmdlets. It lists the cmdlets in alphabetical order based on the verb at the beginning of the cmdlet.


cmdlet Description


Adds an enrollment policy server to the current user or local system configuration.


Exports a certificate from a certificate store into a file.


Exports a certificate or a PFXData object to a Personal Information Exchange (PFX) file.


Submits a certificate request to an enrollment server and installs the response or retrieves a certificate for a previously submitted request.


Retrieves certificate auto-enrollment policy settings.


Returns all of the certificate enrollment policy server URL configurations.


Returns all registered certificate notification tasks.


Extracts the content of a Personal Information Exchange (PFX) file into a structure without importing it to certificate store.


Imports one or more certificates into a certificate store.


Imports certificates and private keys from a Personal Information Exchange (PFX) file to the destination store.


Creates a new task in the Task Scheduler that will be triggered when a certificate is replaced or expires.


Creates a new self-signed certificate for testing purposes.


Removes an enrollment policy server and the URL of the enrollment policy server from the current user or local computer configuration.


Removes a certificate notification task from Task Scheduler.


Sets local certificate auto-enrollment policy.


Marks one certificate as having been replaced by another certificate.


Verifies a certificate according to the input parameters.

To list all the cmdlets that are available, use the Get-Command -Module PKIClient cmdlet.

For more information about, or for the syntax of, any of the cmdlets, use the Get-Help <cmdlet name> cmdlet, where <cmdlet name> is the name of the cmdlet that you want to research. For more detailed information, you can run any of the following cmdlets:

Get-Help <cmdlet name> -Detailed
Get-Help <cmdlet name> -Examples
Get-Help <cmdlet name> -Full

More Information

For more information about Microsoft Certificate Services, see the following:

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

© 2015 Microsoft