DoD PKE InstallRoot v3.15A Author: DoD PKE Engineering Team Email: pke_support@disa.mil Website: http://iase.disa.mil/pki-pke/ Description: InstallRoot is a utility used to manage DoD PKI Certification Authority (CA) certificates in the Windows system certificate store. The Windows system certificate store is used to determine trust during certificate validation by Microsoft applications such as Internet Explorer (IE), Outlook and Internet Information Services (IIS). InstallRoot provides the capabilities to: - Add certificates from the system store - Remove certificates from the system store - List details of the certificates managed by the tool, including their status in the system store InstallRoot installs certificates based on the privileges of the user and the version of the operating system. On Windows XP, if the user has administrative privileges, certificates are installed in the Local Machine store; otherwise, certificates are installed in the Current User store. In Windows Vista and 7, InstallRoot must be run as an administrator, and will always use the Local Machine store. Command-Line Arguments: -d Delete Certificates: Remove the certificates from the system store. -f Force Deletion: Used with the delete (-d) option to force the deletion of certificates without confirmation from the user. -l List Certificates: List details of certificates managed by the tool, as well as their status in the system store. -s Silent Mode: Do not display status and results of the program. -h Display help information. DoD PKE InstallRoot v3.15A List Program Certificates: Store Subject Issuer Not Before Not After Status --- ----- ------------------------------ ------------------------------ ---------- ---------- ----------- 1. ROOT DoD ROOT CA 2 DoD Root CA 2 12/13/2004 15:00:10 12/05/2029 15:00:10 Added 2. CA DOD Intermediate CA-1 DoD Root CA 2 02/05/2008 15:36:43 02/04/2018 14:36:43 Added 3. CA DOD Intermediate CA-2 DoD Root CA 2 05/07/2008 14:44:51 05/07/2018 13:44:51 Added 4. CA DOD CA-11 DoD Root CA 2 01/02/2006 16:24:45 01/01/2012 16:24:45 Added 5. CA DOD CA-12 DoD Root CA 2 01/09/2006 13:47:27 01/08/2012 13:47:27 Added 6. CA DOD CA-13 DoD Root CA 2 01/23/2006 16:49:24 01/22/2012 16:49:24 Added 7. CA DOD CA-14 DoD Root CA 2 01/09/2006 13:57:30 01/08/2012 13:57:30 Added 8. CA DOD CA-15 DoD Root CA 2 06/14/2006 15:22:16 06/13/2012 23:00:00 Added 9. CA DOD CA-16 DoD Root CA 2 06/14/2006 16:58:04 06/14/2012 15:58:04 Added 10. CA DOD CA-17 DoD Root CA 2 06/14/2006 17:09:32 06/14/2012 16:09:32 Added 11. CA DOD CA-18 DoD Root CA 2 06/14/2006 17:16:32 06/14/2012 16:16:32 Added 12. CA DOD CA-19 DoD Root CA 2 04/23/2008 20:57:30 04/23/2014 19:57:30 Added 13. CA DOD CA-20 DoD Root CA 2 04/23/2008 21:05:37 04/23/2014 20:05:37 Added 14. CA DOD CA-21 DoD Root CA 2 01/26/2009 16:35:03 01/25/2015 16:35:03 Added 15. CA DOD CA-22 DoD Root CA 2 01/26/2009 20:18:59 01/25/2015 20:18:59 Added 16. CA DOD CA-23 DoD Root CA 2 01/26/2009 16:38:45 01/25/2015 16:38:45 Added 17. CA DOD CA-24 DoD Root CA 2 01/26/2009 20:23:11 01/25/2015 20:23:11 Added 18. CA DOD CA-25 DoD Root CA 2 01/14/2010 17:33:12 01/14/2016 17:33:12 Added 19. CA DOD CA-26 DoD Root CA 2 01/14/2010 17:38:05 01/14/2016 17:38:05 Added 20. CA DOD CA-27 DoD Root CA 2 09/08/2011 15:50:25 09/08/2017 15:50:25 Added 21. CA DOD CA-28 DoD Root CA 2 09/08/2011 15:57:01 09/08/2017 15:57:01 Added 22. CA DOD CA-29 DoD Root CA 2 09/08/2011 15:58:26 09/08/2017 15:58:26 Added 23. CA DOD CA-30 DoD Root CA 2 09/08/2011 15:59:24 09/08/2017 15:59:24 Added 24. CA DOD EMAIL CA-11 DoD Root CA 2 01/02/2006 16:45:55 01/01/2012 16:45:55 Added 25. CA DOD EMAIL CA-12 DoD Root CA 2 01/09/2006 13:54:45 01/08/2012 13:54:45 Added 26. CA DOD EMAIL CA-13 DoD Root CA 2 01/23/2006 16:54:07 01/22/2012 16:54:07 Added 27. CA DOD EMAIL CA-14 DoD Root CA 2 01/09/2006 14:00:06 01/08/2012 14:00:06 Added 28. CA DOD EMAIL CA-15 DoD Root CA 2 06/14/2006 16:38:45 06/14/2012 15:38:45 Added 29. CA DOD EMAIL CA-16 DoD Root CA 2 06/14/2006 17:04:03 06/14/2012 16:04:03 Added 30. CA DOD EMAIL CA-17 DoD Root CA 2 06/14/2006 17:13:18 06/14/2012 16:13:18 Added 31. CA DOD EMAIL CA-18 DoD Root CA 2 06/14/2006 17:20:29 06/14/2012 16:20:29 Added 32. CA DOD EMAIL CA-19 DoD Root CA 2 04/23/2008 21:03:06 04/23/2014 20:03:06 Added 33. CA DOD EMAIL CA-20 DoD Root CA 2 04/23/2008 21:08:56 04/23/2014 20:08:56 Added 34. CA DOD EMAIL CA-21 DoD Root CA 2 01/26/2009 16:41:13 01/25/2015 16:41:13 Added 35. CA DOD EMAIL CA-22 DoD Root CA 2 01/26/2009 20:25:07 01/25/2015 20:25:07 Added 36. CA DOD EMAIL CA-23 DoD Root CA 2 01/26/2009 16:43:25 01/25/2015 16:43:25 Added 37. CA DOD EMAIL CA-24 DoD Root CA 2 01/26/2009 20:26:15 01/25/2015 20:26:15 Added 38. CA DOD EMAIL CA-25 DoD Root CA 2 01/14/2010 17:36:32 01/14/2016 17:36:32 Added 39. CA DOD EMAIL CA-26 DoD Root CA 2 01/14/2010 17:39:27 01/14/2016 17:39:27 Added 40. CA DOD EMAIL CA-27 DoD Root CA 2 09/08/2011 16:00:18 09/08/2017 16:00:18 Added 41. CA DOD EMAIL CA-28 DoD Root CA 2 09/08/2011 16:01:19 09/08/2017 16:01:19 Added 42. CA DOD EMAIL CA-29 DoD Root CA 2 09/08/2011 16:02:14 09/08/2017 16:02:14 Added 43. CA DOD EMAIL CA-30 DoD Root CA 2 09/08/2011 16:03:08 09/08/2017 16:03:08 Added