Microsoft PVKConverter for SQL Server

Supported Operating Systems

Windows 7, Windows 8, Windows 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012

1. Download the 32bit or 64bit version of the PVKConverter installer that matches your computer’s OS architecture.
2. Click Open to start the installation immediately or click Save to save the installation .msi file to disk and install it later.
3. Accept the license term of this tool.
4. Click Next to complete the installation.

PVKConverter is executed through the command prompt.
Syntax
The syntax for using the tool is as follows:

PVKConverter[.exe] –i inputFile –o outputFile –d decryptionPasswd –e encryptionPasswd -f -h/-?

-i: Specifies the name of the input PFX file. This parameter is required.
-o: Specifies the name of the generated output files. This parameter is optional. If not specified, the output file names are derived from the name of the input file.
-d: Specifies the decryption password for the private keys contained in the PFX file. This parameter is optional.
-e: Specifies the encryption password for the generated PVK files. This parameter is optional.
-f: Configures the tool to overwrite existing PVK/DER files with the same name.
-h or -?: Displays the syntax summary of PVKConverter options.


Comments

Input File Location
• Providing a valid input file location is mandatory. PVKConverter will return an error message otherwise. Both fully qualified and relative paths are supported.


Passwords
• Providing an input decryption password is optional. If the input PFX file requires a decryption password, and one has not been provided, PVKConverter will return an error message.
• Providing an output encryption password is optional. If provided, all generated PVK files will be encrypted using the same password.
• If an input decryption password is provided and an output encryption password is not provided, all generated PVK files will be encrypted using the input decryption password.


Output File Generation
• The number of generated PVK/DER files depends on the number of public/private key pairs contained in the PFX file. One PVK/DER file pair will be generated for each public/private key pair.
• Providing the name for the generated output file is optional. If provided, it must point to a valid location. PVKConverter will return an error message otherwise.
• If an output file name is provided, PVKConverter will append .pvk and .cer to the names of the generated PVK/DER files. If not provided, PVKConverter will derive output files names based of the input PFX file name.
• If the name of an output file generated by PVKConverter matches the name of an existing file, the existing file will be overwritten only if the -f option has been specified.


Examples

PVKConverter -i mySecurityCert -o myGeneratedSecurityCert -d Pa$$word1! -e Pa$$word2!
• If the input certificate mySecurityCert.pfx contains a single pair of public/private keys, PVKConverter will generate two files myGeneratedSecurityCert_1.pvk and myGeneratedSecurityCert_1.cer containing the private key and other information respectively. myGeneratedSecurityCert_1.pvk will be encrypted using the password Pa$$word2!.
• If the input file mySecurityCert.pfx contains 2 pairs of public/private keys, PVKConverter will generate 4 files myGeneratedSecurityCert_1.pvk, myGeneratedSecurityCert_1.cer, myGeneratedSecurityCert_2.pvk and myGeneratedSecurityCert_2.cer. myGeneratedSecurityCert_1.pvk and myGeneratedSecurityCert_2.pvk will be encrypted using the password Pa$$word2!.