Returns all child certificates from a parent certificate used in a user request for the AD RMS cluster.
PowerShell · Risk: Low · Documentation Verified
Last verified: 2026-10-26
Microsoft ADRMSADMIN reference: Returns all child certificates from a parent certificate used in a user request for the AD RMS cluster. The syntax and selected example below are adapted from the pinned Windows Server 2025 reference. Module availability, target configuration and delegated permissions determine whether it can run in your environment. Documentation and parameter text: Microsoft, CC BY 4.0; formatting adapted by Cmdlet World. No execution testing is claimed.
Use an account with the target resource permissions documented for Get-RmsChildCert. Modifying administrative cmdlets may require elevation or delegated administration. This catalog does not assert that ordinary users can execute the command.
Supported environments
Windows / ADRMSADMIN · Windows Server 2025 documentation; feature/module prerequisites apply
Parameters
-Confirm
Prompts you for confirmation before running the cmdlet.
-EndTime
Specifies the end of a time period for a system health report. This parameter specifies a time value. See the description of the StartTime parameter for information on specifying a time.
-ParentCertId (required)
Specifies the parent certificate for which child certificates are to be returned.
-ParentCertType (required)
Specifies the type of parent certificate for which child certificates are to be returned. Possible values for this parameter are Client-Licensor-Certificate (or CLC) or Issuance-License (or IL).
-Path (required)
Specifies a provider drive and path or relative path on the current drive. This parameter is required. Use a dot (.) to specify the current location. This parameter does not accept wildcards and has no default value.
-StartTime
Specifies the beginning of a time period. This parameter specifies a time value. The following examples show commonly-used syntax to specify a time. Time is assumed to be local time unless otherwise specified. When a time value is not specified, the time is assumed to 12:00:00 AM local time. When a date is not specified, the date is assumed to be the current date. 4/17/2006 Monday, April 17, 2006 2:22:45 PM Monday, April 17, 2006 2:22:45 PM These examples specify the same date and the time without the seconds. 4/17/2006 2:22 PM Monday, April 17, 2006 2:22 PM 2:22 PM The following example shows how to specify a date and time by using the RFC1123 standard. This example defines time by using Greenwich Mean Time (GMT). Mon, 17 Apr 2006 21:22:48 GMT The following example shows how to specify a round-trip value as Coordinated Universal Time (UTC). This example represents Monday, April 17, 2006 at 2:22:48 PM UTC. 2000-04-17T14:22:48.0000000
-WhatIf
Shows what would happen if the cmdlet runs. The cmdlet is not run.
Prerequisites
Windows with the ADRMSADMIN module and the Windows feature or management tools that provide it. Confirm target connectivity and version compatibility using the linked Microsoft reference.
Security considerations
This is a read-oriented cmdlet; protect any sensitive results and check the documented effects of your selected parameters.
Examples
Example 1: Get all child certificates for a parent
This command returns all child certificates from a parent client licensor certificate. Source: Microsoft, CC BY 4.0; transcript prompt/output removed. This example was not executed.