Solved

Creating a CSR using certreq.exe

Posted on 2014-02-12
1
2,986 Views
Last Modified: 2014-02-14
Hello Experts,
Thanks in advance for your assistance.

I am trying to implement a Safenet LUNA HSM to store our SSL certificates and need to use certreq.exe in order to  generate a CSR.  I am following instructions that I found on the Safenet website for IIS deployment.  http://www2.safenet-inc.com/AWS-guides/Microsoft_Internet_Information_Services_Integration_guide_RevD.pdf

The instructions suggest I create a request.inf file with the key request info and then run certreq.exe to generate a CSR.  The request.inf info is listed here.

[Version]
Signature= "$Windows NT$"
[NewRequest]
Subject = "C=US,CN=example.com,O=Company,OU=HSM,L=City,S=State"
Exportable = TRUE
HashAlgorithm = SHA256
KeyAlgorithm = RSA
KeyLength = 4096
ProviderName = "Safenet Key Storage Provider"
KeyUsage = 0xf0
MachineKeySet = True
[EnhancedKeyUsageExtension]
OID=1.3.6.1.5.5.7.3.1

The problem I am experiencing is that when I run "certreq.exe -new request.inf request.req" I get an error that says "Invalid provider specified. 0x80090013"

Does anyone know if there is something else I need to have in my .inf file?  Or is there list of acceptable ProviderNames?

Thanks very much for your help!
0
Comment
Question by:JoeNewbie
1 Comment
 
LVL 77

Accepted Solution

by:
arnold earned 500 total points
ID: 39855574
Provider name is a specific parameter for windows cryptography and not from whom you are getting the certificate.
http://technet.microsoft.com/en-us/library/cc736326(v=WS.10).aspx
0

Featured Post

Superior storage. Superior surveillance.

WD Purple drives are built for 24/7, always-on, high-definition security systems. With support for up to 8 hard drives and 32 cameras, WD Purple drives are optimized for surveillance.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How important is it to take extra precautions to protect your online business? These are some steps you can take to make sure you're free of any cyber crime.
There are many Password Managers (PM) out there to choose from. PM's can help with your password habits and routines, but they should not be a crutch you rely on too heavily. I also have an article for company/enterprise PM's.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now