Extracting certificates

The ScGetCerts utility extracts a certificate from a file. This utility can also run on systems where the allow list is not created.

The ScGetCerts utility is shipped with the product and it gets installed in the Application Control installation directory. The default location of ScGetCerts is C:\Program Files\McAfee\Solidcore\Tools\ScGetCerts.

Here is the syntax of the command to extract certificates.

scgetcerts.exe [<FILEPATH: filename|directory>] [OUTPUT PATH] [--cab] <-A> <-O> <-n|-c> [<DOMAIN>] [<USERNAME>] [<PASSWORD>]

To extract certificate from a file, specify the file path with the file name or the directory path where the file is located. If you specify a directory name, certificate, or installer information, certificates are extracted recursively from all files to the specified directory. Also, specify the output directory path where you want to store the extracted certificates, installer information, or both.

This table describes the supported parameters:

Parameter	Description
`--cab`	It extracts certificate from a cab file. When you specify the `--cab` parameter, you must specify the `-O` parameter with it.
`-A`	It extracts all certificates from a file. By default, only the root certificate is extracted.
`-O`	Specify this optional parameter if only the certificates are required to be extracted and not the additional information. But, this parameter is not optional if `--cab` parameter is also specified.
`-c`	It checks if the path of the file is accessible on the network.
`-n`	It provides authentication to the directory path on the network. The `-n` option is specified only when you specify the directory path.

Note
Mention the domain, user name, and password when –n or –c parameter is used.