NSD1065 How to Create a Self Signed Certificate for Web Server

Fact

Nordic Edge Indentity Manager

Situation

To be able to handle https traffic you need a certificate. If you can't afford to buy one or have a PKI infrastrucure you could create one by your self.

Solution

• Download IIS 6.0 resource kit at http://support.microsoft.com/kb/840671

• Install only the SelfSSL.exe part of the resource kit.

• Open the c:/Program Files/IIS Resources/SelfSSL folder and type selfssl.exe for switches for the application

If you want to create a certificate for a web site for 1 year with key lenght 1024 and it is the first website for the web server:

• selfssl.exe /N:CN=TESTServer1.TESTAD.Local /K:1024 /V:365 /S:1 /P:443 (where TESTServer1 is the name of the web server and TESTAD.local is the DNS name)

• Start MMC.exe and add the Certificates Snap-in 

• Pick the Computer account store 

• Verify under Certificates and Personal that the certificate you created exist. If you created the certificate at some other server you need to export the certificate and then import it to the web server

• Drag a copy of the certificate from the certificate store to the Trusted Root certificate Authorities – Certificate store.

Disclaimer

The origin of this information may be internal or external to Nordic Edge™. Nordic Edge™ makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Nordic Edge™ makes no explicit or implied claims to the validity of this information. Any trademarks referenced in this document are the property of their respective owners.
Nordic Edge Support – www.nordicedge.se