Kaspersky Endpoint Agent

Creating a thumbprint for the certificate for signing files with OVAL or XCCDF rules

November 17, 2023

ID 231191

To create a thumbprint for the certificate for signing files with OVAL or XCCDF rules:

  1. On the device, run a command line interpreter (for example, Command Prompt cmd.exe) with the permissions of the local administrator.
  2. Using the cd command, navigate to the folder where the ovaldbmgr.exe file is located.

    For example: cd "C:\Program Files (x86)\Kaspersky Lab\Endpoint Agent\Tools"

  3. Press Enter.
  4. Depending on the location of the certificate, run one of the following commands and press Enter:
    • To create a certificate and then place it the System Storage Local Machine:

      ovaldbmgr.exe --signer=make-cert --subject=<certificate name>

    • To create a certificate and then place it in the PFX container:

      ovaldbmgr.exe --signer=make-cert --subject=<certificate_name> --export --pwd=<password_for_accessing_the_PFX_container> --pfx=<full_path_and_file_name_of_the_PFX_container>

  5. Press Enter.

    If the certificate was created successfully, the thumbprint of the certificate will be returned in the command line.

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.