Note: This article was originally published in 2006. Some steps, commands, or software versions may have changed. Check the current General documentation for the latest information.
I’ve been mostly interested in self-signed certificates for other uses, but surely this provides a good idea of how to use the utility and you can mold it to your needs in the future. Here is the article:
Create a self-signed, code-signing certificate
You can use the following procedure to create a self-signed, code-signing certificate that also creates and installs a private key. To perform this procedure, use the Makecert.exe utility. Makecert.exe is available in the Microsoft .NET Framework 2.0 Software Development Kit (SDK) (http://go.microsoft.com/fwlink/?LinkId=62598), which you can download from the Microsoft Web site.
Administrative credentials
To complete this procedure, you must be a member of the Administrators group on the local computer.
| To create a self-signed, code signing certificate that also creates and installs a private key using a script
---|---
| | • | Example command: makecert -r -pe -n “CN=CertForADFS” -b 01/01/2006 -e 01/01/2007 -eku 1.3.6.1.5.5.7.3.3 -ss my -sr localMachine -sky exchange -sp “Microsoft RSA SChannel Cryptographic Provider” -sy 12 “CertForMe.cer”
---|---
|
Note:
---|---
| Certificate expiration dates should be tracked to make sure that certificates are replaced before they expire.
obtained from: http://technet2.microsoft.com/WindowsServer/en/Library/71977614-985a-4cce-8fcf-7b49d2e5a8951033.mspx?mfr=true