I use command line tools on a standalone Windows 2003 CA, but I'm pretty sure they work the same way on newer versions as well.
To submit a request
certreq.exe -config .\MyCA -submit myhost1.req
This returns something like this:
Certificate request is pending: Taken Under Submission (0)
You can then issue the request:
certutil.exe -resubmit 555
and export it into a file:
certreq.exe -config .\MyCA -Retrieve 555 myhost1.cer
So with this knowledge and 100 request files in a directory you can use PowerShell:
- Loop through all the files and execute the three commands for each file
- You need to parse the output of the
certreq submit command to get the request id you need in the later two steps.
-config .\myCA is to specify the CA to use, in this case one with the name 'myCA' on the local machine.
If you already have the requests in the system, you need to loop through all the pending ones and then run the last two steps against each one.