what do you mean under "perform certificate count"?My weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com

On Thu, 14 Jul 2011 10:52:38 +0000, Vadims Podans [MVP] wrote: what do you mean under "perform certificate count"? He wants to know, given a specific certificate template, how many certificates have been issued based on that template. Paul Adare MVP - Identity Lifecycle Manager http://www.identit.ca Program: What commercials try to do to us.

If you want to count the number of certificates from the previous example then just notice the summary of the output and look for the line indicating the number of total rows returned. here is a sample output from the command certutil -view -restrict "certificatetemplate=webserver" -out "requestid" Schema: Column Name Localized Name Type MaxLength ---------------------------- ---------------------------- ------ --------- RequestID Issued Request ID Long 4 -- Index ed Row 1: Issued Request ID: 0xe (14) Row 2: Issued Request ID: 0xf (15) Maximum Row Index: 2 2 Rows 2 Row Properties, Total Size = 8, Max Size = 4, Ave Size = 4 0 Request Attributes, Total Size = 0, Max Size = 0, Ave Size = 0 0 Certificate Extensions, Total Size = 0, Max Size = 0, Ave Size = 0 2 Total Fields, Total Size = 8, Max Size = 4, Ave Size = 4 CertUtil: -view command completed successfully. /Hasain

Thanks all. For large CA databases I remember reading somewhere on a limitation on the number of rows the tool can output which might be the only snag but we'll take a look using this method.

Is anyone aware of command to export out all certificates by template name on a 2003 CA issuing server ? looking for the easiest method to export out all certificates issued by a specific template including failed requests and those that have been revoked.

try the command: certutil -view -restrict "certificatetemplate=webserver" /Hasain

Thanks Hasain. Don't suppose you know if there is a command to perform a certificate count based on template ?