Create Certificates in a Windows Environment

2009-07-09 by Administrator, tagged as microsoft

A quick reminder for a certreq.inf file

[NewRequest]
Subject = "CN=name"
KeyLength = 2048
Exportable = TRUE
MachineKeySet = TRUE

[RequestAttributes]
CertificateTemplate = "Template Name"

Type

certreq.exe -new

and supply the above file in the open file dialog. Then, specify a file to save the request in. Take the request (base-64 – cut’n'paste will do) to a CA and submit it. Take the response certificate back to the machine (base-64 again) and type

certreq.exe -acceppt "response.cer"

You will the find a certificate in the machine store (MachineKeySet = TRUE). Of course, template and usage must match

UPDATE: Just found an article that relates to this one.