The DASCLI certwvt command runs the WinVerify Trust function on the specified file.

Parameters

dascli certwvt file_name [flags] [revocation_flags]

file_name
Name of the file, and not a directory name or wildcard.
flags
Hexadecimal integer. The following flags can be used together by using the OR operator.
Hexadecimal Flag
0x0000FFFF WTD_PROV_FLAGS_MASK
0x00000001 WTD_USE_IE4_TRUST_FLAG
0x00000002 WTD_NO_IE4_CHAIN_FLAG
0x00000004 WTD_NO_POLICY_USAGE_FLAG
0x00000010 WTD_REVOCATION_CHECK_NONE
0x00000020 WTD_REVOCATION_CHECK_END_CERT
0x00000040 WTD_REVOCATION_CHECK_CHAIN
0x00000080 WTD_REVOCATION_CHECK_CHAIN_EXCLUDE_ROOT
0x00000100 WTD_SAFER_FLAG
0x00000200 WTD_HASH_ONLY_FLAG
0x00000400 WTD_USE_DEFAULT_OSVER_CHECK
0x00000800 WTD_LIFETIME_SIGNING_FLAG
0x00001000 WTD_CACHE_ONLY_URL_RETRIEVAL  
0x00002000 WTD_DISABLE_MD2_MD4
The default is WTD_REVOCATION_CHECK_CHAIN | WTD_LIFETIME_SIGNING_FLAG.
revocation_flags
Hexadecimal integer. The following revocation flags can be used together by using the OR operator.
Hexadecimal Revocation Flag
0x00000000 WTD_REVOKE_NONE
0x00000001 WTD_REVOKE_WHOLECHAIN
The default is WTD_REVOKE_WHOLECHAIN.