Command Summary

List installed cryptographic providers

certutil -csplist
cngtool EnumProvider

Check if the CNG Provider is correctly configured

cngtool ProviderInfo

Verify that the CA service is running

sc query certsvc

Verify the CA key

certutil –verifykeys

Create DB Schema for External Key Storage in MSSQL

cxitool dbConnString="DSN=<ODBC>;Uid=<Username>;Pwd=<Password>" CreateDBSchema=mssql

Create Key using an SDB external keystore

cxitool Dev=<port@IP> LogonPass=<user>,<password> keystoretype=SDB keystoreparam="<SDB_PATH>" group="" | Name=<KEY_NAME> Usage=ENCRYPT,DECRYPT,SIGN,VERIFY spec=0 generatekey=AES,256