Solved

Creating a Certificate Request File

Posted on 2004-08-05
6
585 Views
Last Modified: 2010-05-18
How do I generate a key pair and certificate request file to send to someone to sign for Windows. this certificate is for client authentication NOT for a website.
0
Comment
Question by:vinny45
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
6 Comments
 
LVL 4

Expert Comment

by:alikoank
ID: 11733244
you can use openssl or ssleay (they both are unix programs)

or:

http://java.sun.com/docs/books/tutorial/security1.2/sigcert/

as a further step:

if you want your clients to sign their e-mails
http://www.verisign.com/products-services/security-services/pki/pki-application/email-digital-id/index.html

if you want to sign your clieant applications (code signing)
http://www.verisign.com/products-services/security-services/code-signing/index.html

0
 

Author Comment

by:vinny45
ID: 11733594
this client cert is for an asp.net application in windows 2003, sorry i should've mentioned that. will your links work? the cert request is for a specific someone.
0
 
LVL 4

Expert Comment

by:alikoank
ID: 11734505
yes, they will work. certificates are standart. But .NET package should contain a tool for this. I am not familiar with .NET but a quick google search turned out tools like

signcode.exe
makecert.exe

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cptools/html/cpgrfCertificateCreationToolMakeCertExe.asp
0
When ransomware hits your clients, what do you do?

MSPs: Endpoint security isn’t enough to prevent ransomware.
As the impact and severity of crypto ransomware attacks has grown, Webroot has fought back, not just by building a next-gen endpoint solution capable of preventing ransomware attacks but also by being a thought leader.

 

Author Comment

by:vinny45
ID: 11737708
does makecert create a key pair and Certificate Request File? thanks for all the suggetions though
0
 
LVL 4

Accepted Solution

by:
alikoank earned 500 total points
ID: 11737830
no, you use strong name tool (sn.exe) to create key pair. After you created your key pair go to verisign and apply for digital id.

csr (certificate signing request is not needed for code signing, you cast fill out an online form)

for details please follow the links in my previous comment.
0

Featured Post

Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A 2007 NCSA Cyber Security survey revealed that a mere 4% of the population has a full understanding of firewalls. As business owner, you should be part of that 4% that has a full understanding.
With the rising number of cyber attacks in recent years, keeping your personal data safe has become more important than ever. The tips outlined in this article will help you keep your identitfy safe.
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses
Course of the Month11 days, 17 hours left to enroll

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question