Generate Certificate Signing Request for Windows 2003/2008
This document is only for advanced users who prefer a command shell to graphical user interface.
Save the following file as request.inf on your server editing the subject according to the comment:
;----------------- request.inf -----------------
[Version]
Signature="$Windows NT$"
[NewRequest]
Change to your,country code, company name and common name:
Subject = "C=US, O=Acme Safe Co, CN=store.acmesafe.com"
KeySpec = 1
KeyLength = 2048
; Can be 2048, 4096, 8192, or 16384.
Exportable = TRUE
MachineKeySet = TRUE
SMIME = False
PrivateKeyArchive = FALSE
UserProtected = FALSE
UseExistingKeySet = FALSE
ProviderName = "Microsoft RSA SChannel Cryptographic Provider"
ProviderType = 12
RequestType = PKCS10
KeyUsage = 0xa0
[EnhancedKeyUsageExtension]
OID=1.3.6.1.5.5.7.3.1 ; this is for Server Authentication / Token Signing
;----------------------------------------------- Then run:
c:\>certreq -new request.inf request.csr This will generate your csr. When submitting the csr select Microsoft IIS 5.x and 6.x REGARDLESS OF THE VERSION YOU ARE ACUTALLY RUNNING. When your certificate is issued you'll receive a file called store_acmesafe_com.cer. Save it on the server and from the same directory run:
C:\>certreq -accept store_acmesafe_com.cer This will install the cert in the Windows certificate store and it will be available in IIS, MMC, Exchange, LDAP/Active Directory etc.
cyber_Folks S.A. – Cookie settings
Do you like good cookies? We too! Some cookies are required for the website to function properly. Also accept additional cookies related to service performance, social networking and marketing. Cookies are also used to personalize ads. Thanks to them, you will get the best experience of our website, which we are constantly improving. The consent granted voluntarily may be withdrawn or modified at any time. More information about the cookies used can be found in our privacy policy. If you prefer to specify your preferences precisely - see the types of cookies below.