Create a Self-Signed SSL Certificate

Create a Self-Signed SSL Certificate

To create a self-signed SSL certificate:

Step 1: Run the Command Prompt as administrator and locate the Windows SDK installation directory. The default location is C:\Program Files\Microsoft SDKs\Windows\v7.1\Bin\.

Step 2: Execute the following command:

makecert -sv SignRoot.pvk -cy authority -r SignRoot.cer -a sha512 -n "CN=Development Authority" -ss my -sr localmachine

-n Specifies the subject's certificate name. You can use any name, specified in double quotes and preceded by CN= Example: "CN=Sana Software Company" -a Specifies the secure hash algorithm. It must be sha256, sha384, or sha512.

Step 3: When you are prompted, enter a password. You need this password to create the service certificate.

Step 4: Find out the external server IP address.

Step 5: Execute the following command:

makecert -iv SignRoot.pvk -ic SignRoot.cer -cy end -pe -n CN="0.0.0.0" -eku 1.3.6.1.5.5.7.3.1,1.3.6.1.5.5.7.3.2 -ss my -sr localmachine -sky exchange -sp "Microsoft RSA SChannel Cryptographic Provider" -sy 12

Before executing the command substitute the subject's certificate name (-n CN=" ") with the external server IP address.

Step 6: When you are prompted, enter the password that you used before.

Step 7: Check that two certificate files ('SignRoot.pvk' and 'SignRoot.cer') were created in the SDK directory.