Windows - create strong certificates


WHat is the best way to create strong certificates for IIS servers.  The default values IIS provides is not acceptable.  Or can i use openssl on windows too or is there a better tool?
Eric DonaldsonAsked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

bbaoConnect With a Mentor IT ConsultantCommented:
I guess you mean 2048 or even higher for the bit length of a server certificate?

you can change the value of bit length when creating a certificate signing request using IIS manager.

a good tutorial can be found here.
Dr. KlahnConnect With a Mentor Principal Software EngineerCommented:
imo, the best way to create strong certificates is to buy them from a recognized CA.  Locally generated certificates will be an issue if a server is connected to the internet and HTTPS service is required.
Eric DonaldsonAuthor Commented:
This is just a test website and is not connected externally right now
bbaoConnect With a Mentor IT ConsultantCommented:
as the title suggested "Windows - create strong certificates", i guess the author intended to create certificates using a Windows based CA server.

does the suggestion above work for you?
Dave BaldwinFixer of ProblemsCommented:
Why do you say they're not strong enough?  Note that you can't get the current commercial certificates without a public domain name to go with them.  I'mnot even sure how you can test them on the LAN without an internet connection.
All Courses

From novice to tech pro — start learning today.