Dsstore.exe: Directory Services Store

Server-only: This tool is included in the Windows 2000 Server Resource Kit only.

This tool assists in managing Enterprise Public Key Integration. It includes functionality necessary for several deployment scenarios.

DsStore enables you to:

• list information about a given computer's certificates.
• list information about computer's objects on the domain.
• list information about Certificate Authorities in the Enterprise.
• add, remove, and display certificates from the directory services Enterprise Root Store.
• add and remove certificate revocation lists (CRLs) from directory services.
• validate certificates from directory services public key infrastructure (PKI) locations.
• pulse "autoenrollment" events to speed up various PKI processes
• add non-Microsoft® Windows® 2000 Certificate Authorities or offline Certificate Authorities to the enterprise PKI.
• manage enterprise roots in directory services.
• verify Machine Autoenrollment and Domain Controller certificates from Kerberos Key Distribution Center (KDC).
• check on status and validity of domain controller certificates.
• check on validity of smart card certificates.

DsStore Topics

• DsStore Syntax

File Required

• Dsstore.exe