Edit

Share via

Pvk2Pfx

  • Article

Pvk2Pfx (Pvk2Pfx.exe) is a command-line tool that copies public key and private key information contained in .spc, .cer, and .pvk files to a Personal Information Exchange (.pfx) file.

    pvk2pfx /pvk 
    pvkfilename.pvk [/pi pvkpassword] /spc spcfilename.ext [/pfx pfxfilename.pfx [/po pfxpassword] [/f]]

Switches and Arguments

/pvk pvkfilename.pvk
Specifies the name of a .pvk file.

/spc spcfilename.ext
Specifies the name and extension of the Software Publisher Certificate (SPC) file that contains the certificate. The file can be either a .spc file or a .cer file.

/pfx pfxfilename.pfx
Specifies the name of a .pfx file.

/pi pvkpassword
Specifies the password for the .pvk file.

/po pfxpassword
Specifies a password for the .pfx file. If a password for the .pfx file is not specified, the password for the .pfx file will be the same as the password for .pvk file.

/f
Configures Pvk2Pfx to overwrite a .pfx file, if one exists that has the same name as that specified by the -pfx switch.

Comments

If the -pfx pfxfilename.pfx switch is not supplied, pvk2pfx ignores the -po password switch and the -f switch, and displays a wizard that prompts the user for the name of the .pfx file and its corresponding password.

In order to use the SignTool tool to sign drivers using a SPC in a manner that complies with the kernel-mode code signing policy, the SPC information must be added to the Personal certificate store on the local computer that signs the drivers. For information about how to add the SPC information to the Personal certificate store, see Software Publisher Certificate.

A 32-bit version of the Pvk2Pfx tool is located in the bin\x86 folder of the WDK. A 64-bit version of the tool is located in the bin\x64 of the WDK. For example, on an x64-based computer running Windows 10, the path is C:\Program Files (x86)\Windows Kits\10\bin\x64.

Examples

The following command generates the .pfx file Mypfxfile.pfx from Mypvkfile.pvk and Myspcfile.spc. The command supplies the password mypassword for the .pvk file, which becomes the password for the .pfx file Mypfxfile.pfx. If there is an existing file named Mypfxfile.pfx, the -f switch configures the Pvk2Pfx tool to replace the existing file with a new file.

pvk2pfx -pvk mypvkfile.pvk -pi mypassword -spc myspcfile.spc -pfx mypfxfile.pfx -f