Creating a Child Certificate Report
Updated: October 22, 2009
Applies To: Windows Server 2008 R2, Windows Server 2008 R2 with SP1
A child certificate report lets you view the certificates that were issued from a particular client licensor certificate (CLC) or issuance license (IL). You can use this information to help you troubleshoot problems with certificate and license issuance, for example. You can obtain the required certificate ID and type from a certificate chain report. For more information, see Creating a Certificate Chain Report.
Membership in the local AD RMS Enterprise Administrators, or equivalent, is the minimum required to complete this procedure.
To create a child certificate report
At the Windows PowerShell command prompt, type:
Get-RmsChildCert -Path<drive>:\Report[-StartTime<start_time>] [-EndTime<end_time>]-ParentCertID<parent_ID>-ParentCertType<parent_type>where <drive> is the name of the Windows PowerShell drive, <start_time> and <end_time> are the beginning and ending time of the range of child certificates you want to include in the report, <parent_ID> is the ID of the parent certificate for which you want to obtain child information, and <parent_type> is the type (Client-Licensor-Certificate or Issuance-License) of the parent certificate. You can also specify
CLCorILas the value of the -ParentCertType parameter. Times are expressed as Coordinated Universal Time (UTC), also known as Greenwich Mean Time. The default range is the preceding 14 days.
See Also
Concepts
Using Windows PowerShell to Administer AD RMS
Understanding the AD RMS Administration Provider Namespace
AD RMS Administration Cmdlets
Working with Reports