The pvk2pfx tool (Pvk2pfx.exe) is a command-line tool copies public key and private key information that is contained in .spc, .cer, and .pvk files to a personal information exchange (.pfx) file.

pvk2pfx -pvk pvkfilename.pvk [-pi pvkpassword] -spc spcfilename.ext [-pfx pfxfilename.pfx [-po pfxpassword] [-f]]

Parameters and Options

-pvk pvkfilename.pvk

Supplies the name of a .pvk file.

-spc spcfilename.ext

Supplies the name and extension of the Software Publisher Certificate (SPC) file that contains the certificate. The file can be either an .spc file or a .cer file.

-pfx pfxfilename.pfx

Supplies the name of a .pfx file.

-pi pvkpassword

Supplies the password for the .pvk file.

-po pfxpassword

Supplies a password for the .pfx file. The password for the .pfx file will be the same as the .pvk file if a password for the .pfx file is not specified.

-f

Configures pvk2pfx to overwrite a .pfx file, if one exists that has the same name as that specified by the -pfx option.

Comments

If the -pfx pfxfilename.pfx option is not supplied, pvk2pfx ignores the -po password option and the -f option, and displays a wizard that prompts the user for the name of the .pfx file and its corresponding password.

In order to use the SignTool tool to sign drivers using a SPC in a manner that complies with the kernel-mode code signing policy, the SPC information must be added to the Personal certificate store on the local computer that signs the drivers. For information about how to add the SPC information to the Personal certificate store, see Software Publisher Certificate.

The pvk2pfx tool is located in the ..\bin\SelfSign folder of the WDK.

Examples

The following command generates the .pfx file Mypfxfile.pfx from Mypvkfile.pvk and Myspcfile.spc. The command supplies the password mypassword for the .pvk file, which becomes the password for the .pfx file Mypfxfile.pfx. If there is an existing file named Mypvkfile.pvk, the -f option configures pvk2pfx to replace the existing file with a new file.

pvk2pfx -pvk mypvkfile.pvk -pi mypassword -spc myspcfile.spc -pfx mypfxfile.pfx -f