CODEWITHSUNDEEP
windowsssl-certificate
Rahul
Rahul

Reputation: 1639

How to create a self signed cerficate using command prompt?

Is there a way to create a self signed certificate in IIS in windows 2012 R2 using command prompt? I went many documents, everywhere there is tutorial using Windows powershell but not using command prompt. I do not have makecert utility installed in my system. Is there any other command or utility. I saw a selfssl utility but i am not sure whether it will work on windows 2012 RE server.

Upvotes: 5

Views: 9509

Answers (3)

Nash A
Nash A

Reputation: 91

The article rsa-key-blocking-is-here.aspx moved here.

rsa-key-blocking-is-here

Upvotes: 0

Crypt32
Crypt32

Reputation: 13944

I wouldn't bother with makecert as it is deprecated. Instead, I would suggest you use PowerShell as it is the mainstream administration tool in Windows Server. Windows Server 2012 has a built-in cmdlet to generate self-signed certificates: https://technet.microsoft.com/en-us/library/hh848633(v=wps.630).aspx

When Microsoft deprecated makecert tool, they enhanced the certreq cmdline tool with the ability to generate self-signed certificates, though, with an overhead: http://blogs.technet.com/b/askds/archive/2012/08/14/rsa-key-blocking-is-here.aspx

Upvotes: 2

pepo
pepo

Reputation: 8877

Try certreq tool. Data are given in a form of inf file. The before mentioned link contains information about the file structure. This link contains example inf file of an SSL certificate (could be of more help).

Then run

certreq -new your_inf_file.inf generated_req.req

As a side effect it will generate a self signed certificate in Certificate Enrollment Requests in the store you specified in the inf file. Just move the certificate to My store and also (because it is self signed) to Trusted Root Certification Authorities.

You can also use xca. It is a nice utility built on openssl which lets you create any certificates (self signed or any chain of CAs) and it is easy to use.

Upvotes: 3

Related Questions