«

»

Jul 04

Create a self-signed, code-signing certificate

I've been mostly interested in self-signed certificates for other uses, but surely this provides a good idea of how to use the utility and you can mold it to your needs in the future. Here is the article:

Create a self-signed, code-signing certificate

You can use the following procedure to create a self-signed, code-signing
certificate that also creates and installs a private key. To perform this
procedure, use the Makecert.exe utility. Makecert.exe is available in the
Microsoft .NET Framework 2.0 Software Development Kit (SDK) (http://go.microsoft.com/fwlink/?LinkId=62598), which you can download from the Microsoft Web site.

Administrative credentials

To complete this procedure, you must be a member of the Administrators group
on the local computer.

To create a self-signed, code signing certificate that also creates and
installs a private key using a script

Example command:

makecert -r -pe -n "CN=CertForADFS" -b 01/01/2006 -e 01/01/2007 -eku
1.3.6.1.5.5.7.3.3 -ss my -sr localMachine -sky exchange -sp "Microsoft RSA
SChannel Cryptographic Provider" -sy 12
"CertForMe.cer"

Note:

Certificate expiration dates should be tracked to make sure that certificates
are replaced before they expire.

obtained from: http://technet2.microsoft.com/WindowsServer/en/Library/71977614-985a-4cce-8fcf-7b49d2e5a8951033.mspx?mfr=true

Leave a Reply

%d bloggers like this: