Historical Content Alert

This is a historical content for Windows 2000 product and is presented for informative purposes only. All content on this page is copyrighted and owned by Microsoft.

To publish certificates to the file system

  1. Log on to the system as an Administrator.
  2. Open Certification Authority.
  3. In the console tree, click the name of the certification authority (CA).

    • Certification Authority (computer)
    • CA name
  4. On the Action menu, click Properties.
  5. On the Exit Module tab, click Configure.
  6. On the Certificate Publication tab, select the Allow certificates to be published to the file system check box, and then click OK.
  7. Stop and restart the Certification Authority service.


  • To open Certification Authority, click Start, point to Programs, point to Administrative Tools, and then click Certification Authority.
  • Publishing certificates to the file system is turned off by default for the CA if you have Active Directory available. It is turned on by default if you do not have Active Directory.
  • To stop and restart Certificate Services, see Related Topics.
  • To request a certificate and have it published to the file system, the cerificate requestor must include an attribute of the form certfile:filename in their request. After the certificate is issued, it will be copied to filename.
    • The file will be written in the CertEnroll share on the CA.
    • Any paths included in the filename will be removed.
    • You cannot overwrite files using this method.
    • If an invalid or existing filename is given, no file will be written and an error will be written in the event log.

Share this article: