Solved

Creating a CSR using certreq.exe

Posted on 2014-02-12
1
3,024 Views
Last Modified: 2014-02-14
Hello Experts,
Thanks in advance for your assistance.

I am trying to implement a Safenet LUNA HSM to store our SSL certificates and need to use certreq.exe in order to  generate a CSR.  I am following instructions that I found on the Safenet website for IIS deployment.  http://www2.safenet-inc.com/AWS-guides/Microsoft_Internet_Information_Services_Integration_guide_RevD.pdf

The instructions suggest I create a request.inf file with the key request info and then run certreq.exe to generate a CSR.  The request.inf info is listed here.

[Version]
Signature= "$Windows NT$"
[NewRequest]
Subject = "C=US,CN=example.com,O=Company,OU=HSM,L=City,S=State"
Exportable = TRUE
HashAlgorithm = SHA256
KeyAlgorithm = RSA
KeyLength = 4096
ProviderName = "Safenet Key Storage Provider"
KeyUsage = 0xf0
MachineKeySet = True
[EnhancedKeyUsageExtension]
OID=1.3.6.1.5.5.7.3.1

The problem I am experiencing is that when I run "certreq.exe -new request.inf request.req" I get an error that says "Invalid provider specified. 0x80090013"

Does anyone know if there is something else I need to have in my .inf file?  Or is there list of acceptable ProviderNames?

Thanks very much for your help!
0
Comment
Question by:JoeNewbie
1 Comment
 
LVL 77

Accepted Solution

by:
arnold earned 500 total points
ID: 39855574
Provider name is a specific parameter for windows cryptography and not from whom you are getting the certificate.
http://technet.microsoft.com/en-us/library/cc736326(v=WS.10).aspx
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Enterprise Password Manager Suites as well as Local Password managers are covered in this article.
On Beyond Tools A conversation I recently had with the DevOps manager of a major online retailer really made me think about DevOps monitoring tools (https://www.onpage.com/devops-incident-management-tool/). The manager and I discussed how sever…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

778 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question