PKI Client Cmdlets in Windows PowerShell

Windows PowerShell® is a task-based command-line shell and scripting language designed especially for system administration. This reference topic for the information technology (IT) professional provides assistance in utilizing the Windows PowerShell cmdlets to script and automate tasks.

Public Key Infrastructure (PKI) Client

This reference provides cmdlet descriptions and syntax for all public key infrastructure (PKI) client-specific cmdlets. It lists the cmdlets in alphabetical order based on the verb at the beginning of the cmdlet.

cmdlet Description

Add-CertificateEnrollmentPolicyServer

Adds an enrollment policy server to the current user or local system configuration.

Export-Certificate

Exports a certificate from a certificate store into a file.

Export-PfxCertificate

Exports a certificate or a PFXData object to a Personal Information Exchange (PFX) file.

Get-Certificate

Submits a certificate request to an enrollment server and installs the response or retrieves a certificate for a previously submitted request.

Get-CertificateAutoEnrollmentPolicy

Retrieves certificate auto-enrollment policy settings.

Get-CertificateEnrollmentPolicyServer

Returns all of the certificate enrollment policy server URL configurations.

Get-CertificateNotificationTask

Returns all registered certificate notification tasks.

Get-PfxData

Extracts the content of a Personal Information Exchange (PFX) file into a structure without importing it to certificate store.

Import-Certificate

Imports one or more certificates into a certificate store.

Import-PfxCertificate

Imports certificates and private keys from a Personal Information Exchange (PFX) file to the destination store.

New-CertificateNotificationTask

Creates a new task in the Task Scheduler that will be triggered when a certificate is replaced or expires.

New-SelfSignedCertificate

Creates a new self-signed certificate for testing purposes.

Remove-CertificateEnrollmentPolicyServer

Removes an enrollment policy server and the URL of the enrollment policy server from the current user or local computer configuration.

Remove-CertificateNotificationTask

Removes a certificate notification task from Task Scheduler.

Set-CertificateAutoEnrollmentPolicy

Sets local certificate auto-enrollment policy.

Switch-Certificate

Marks one certificate as having been replaced by another certificate.

Test-Certificate

Verifies a certificate according to the input parameters.

참고

To list all the cmdlets that are available, use the Get-Command -Module PKIClient cmdlet.

For more information about, or for the syntax of, any of the cmdlets, use the Get-Help <cmdlet name> cmdlet, where <cmdlet name> is the name of the cmdlet that you want to research. For more detailed information, you can run any of the following cmdlets:

Get-Help <cmdlet name> -Detailed
Get-Help <cmdlet name> -Examples
Get-Help <cmdlet name> -Full

More Information

For more information about the cmdlets, see the following:

-