Historical Content Alert

This is a historical content for Windows NT 4.0 product and is presented for informative purposes only. All content in this directory is copyrighted and owned by Microsoft.

Replacing Missing CA Certificates

In the event that the Certificate Authority (CA) certificates at the Shared Folder location later become damaged or lost, run the CertUtil program to retrieve the CA certificates from the certificate store and write them back to the Shared Folder location. CertUtil must be invoked twice, once for the signature certificate and once for the key exchange certificate.

Note If other files are damaged or missing from the Shared Folder location, it will still be necessary to restore them from backup or run the Configuration Wizard to restore the configuration.

The following examples retrieve the CA certificates for the Certificate Authority (CA) identified by ConfigString:

certutil -config ConfigString -ca.exchange ExchangeFile.crt
certutil -config ConfigString -ca.signature SignatureFile.crt

For more information on CertUtil command syntax CertUtil.

Share this article: