Cara Install File .pem di Windows 7/8.1/10/11

Ask.web.id - Install file .pem di windows dengan perintah "certutil" melalui cmd merupakan cara paling mudah dan cepat dalam memasang update certificate.

Untuk melakukan update certificate dengan cmd kita hanya perlu beberapa langkah saja.

Dalam perintah certutil pada cmd kita bisa menggunakan parameters berikut untuk melakukan update, backup, atau delete certificate (file .crt) yang sudah expired.

Parameter certutil yang saya maksud bisa dilihat dibawah. Ini adalah full parameter yang bisa kamu gunakan dalam penggunaan certutil.

CertUtil Parameter List:

-dump             -- Dump configuration information or files
-asn              -- Parse ASN.1 file

-decodehex        -- Decode hexadecimal-encoded file
-decode           -- Decode Base64-encoded file
-encode           -- Encode file to Base64

-deny             -- Deny pending request
-resubmit         -- Resubmit pending request
-setattributes    -- Set attributes for pending request
-setextension     -- Set extension for pending request
-revoke           -- Revoke Certificate
-isvalid          -- Display current certificate disposition

-getconfig        -- Get default configuration string
-ping             -- Ping Active Directory Certificate Services Request iace
-pingadmin        -- Ping Active Directory Certificate Services Admin inte
-CAInfo           -- Display CA Information
-ca.cert          -- Retrieve the CA's certificate
-ca.chain         -- Retrieve the CA's certificate chain
-GetCRL           -- Get CRL
-CRL              -- Publish new CRLs [or delta CRLs only]
-shutdown         -- Shutdown Active Directory Certificate Services

-installCert      -- Install Certification Authority certificate
-renewCert        -- Renew Certification Authority certificate

-schema           -- Dump Certificate Schema
-view             -- Dump Certificate View
-db               -- Dump Raw Database
-deleterow        -- Delete server database row

-backup           -- Backup Active Directory Certificate Services
-backupDB         -- Backup Active Directory Certificate Services databas
-backupKey        -- Backup Active Directory Certificate Services certifiand private key
-restore          -- Restore Active Directory Certificate Services
-restoreDB        -- Restore Active Directory Certificate Services databa
-restoreKey       -- Restore Active Directory Certificate Services certif and private key
-importPFX        -- Import certificate and private key
-dynamicfilelist  -- Display dynamic file List
-databaselocations -- Display database locations
-hashfile         -- Generate and display cryptographic hash over a file

-store            -- Dump certificate store
-addstore         -- Add certificate to store
-delstore         -- Delete certificate from store
-verifystore      -- Verify certificate in store
-repairstore      -- Repair key association or update certificate propertr key security descriptor
-viewstore        -- Dump certificate store
-viewdelstore     -- Delete certificate from store

-dsPublish        -- Publish certificate or CRL to Active Directory

-ADTemplate       -- Display AD templates
-Template         -- Display Enrollment Policy templates
-TemplateCAs      -- Display CAs for template
-CATemplates      -- Display templates for CA
-enrollmentServerURL -- Display, add or delete enrollment server URLs assed with a CA
-ADCA             -- Display AD CAs
-CA               -- Display Enrollment Policy CAs
-Policy           -- Display Enrollment Policy
-PolicyCache      -- Display or delete Enrollment Policy Cache entries
-CredStore        -- Display, add or delete Credential Store entries
-InstallDefaultTemplates -- Install default certificate templates
-URLCache         -- Display or delete URL cache entries
-pulse            -- Pulse autoenrollment events
-MachineInfo      -- Display Active Directory machine object information
-DCInfo           -- Display domain controller information
-EntInfo          -- Display enterprise information
-TCAInfo          -- Display CA information
-SCInfo           -- Display smart card information

-SCRoots          -- Manage smart card root certificates

-verifykeys       -- Verify public/private key set
-verify           -- Verify certificate, CRL or chain
-sign             -- Re-sign CRL or certificate

-vroot            -- Create/delete web virtual roots and file shares
-vocsproot        -- Create/delete web virtual roots for OCSP web proxy
-addEnrollmentServer -- Add an Enrollment Server application
-deleteEnrollmentServer -- Delete an Enrollment Server application
-oid              -- Display ObjectId or set display name
-error            -- Display error code message text
-getreg           -- Display registry value
-setreg           -- Set registry value
-delreg           -- Delete registry value

-ImportKMS        -- Import user keys and certificates into server databar key archival
-ImportCert       -- Import a certificate file into the database
-GetKey           -- Retrieve archived private key recovery blob
-RecoverKey       -- Recover archived private key
-MergePFX         -- Merge PFX files
-ConvertEPF       -- Convert PFX files to EPF file
-?                -- Display this usage message

Setelah kita mengetahui parameters certutil di atas sekarang kita coba untuk install file .pem yang sudah kamu siapkan, pastikan .pem yang kamu sudah download merupakan versi terbaru.

Berikut adalah cara install .pem di windows melalui cmd:

Install File .pem via CMD Windows

1. Buka CMD. Kamu bisa dengan cara klik windows + R di keyboar lalu ketikan "cmd", atau kamu bisa ketikan cmd pada pencarian di start menu. Silakan kamu pilih mana yang menurut kamu paling mudah.
2. Pindahkan file .pem ke local disk C. Cara ini untuk mempermudah untuk melakukan install-nya nanti. Contoh file yang akan saya install yaitu isrgrootx1.pem yang sudah saya findahkan ke root disk C jadi lokasi filenya C:\isrgrootx1.pem
3. Ketikan perintah certutil dibawah:
   

   certutil -addstore -f "Root" C:\isrgrootx1.pem

   Jika file .pem berhasil di install nanti akan terlihat seperti gambar ini:

   

4. Restart

okay diatas adalah artikel cara install file .pem di windows 7/8.1/10/11 dengn 4 langkah saja kamu sudah berhasil update certificate yang expired. Semoga tulisan yang singkat ini bermanfaat buat pengunjung semua. Wassalam...