Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 112
  • Last Modified:

Windows - create strong certificates

Hi,

WHat is the best way to create strong certificates for IIS servers.  The default values IIS provides is not acceptable.  Or can i use openssl on windows too or is there a better tool?
0
Eric Donaldson
Asked:
Eric Donaldson
3 Solutions
 
bbaoIT ConsultantCommented:
I guess you mean 2048 or even higher for the bit length of a server certificate?

you can change the value of bit length when creating a certificate signing request using IIS manager.

a good tutorial can be found here.

https://www.sslshopper.com/article-installing-an-ssl-certificate-in-windows-server-2008-iis-7.0.html
0
 
Dr. KlahnPrincipal Software EngineerCommented:
imo, the best way to create strong certificates is to buy them from a recognized CA.  Locally generated certificates will be an issue if a server is connected to the internet and HTTPS service is required.
0
 
Eric DonaldsonAuthor Commented:
This is just a test website and is not connected externally right now
0
 
bbaoIT ConsultantCommented:
as the title suggested "Windows - create strong certificates", i guess the author intended to create certificates using a Windows based CA server.

does the suggestion above work for you?
0
 
Dave BaldwinFixer of ProblemsCommented:
Why do you say they're not strong enough?  Note that you can't get the current commercial certificates without a public domain name to go with them.  I'mnot even sure how you can test them on the LAN without an internet connection.
0

Featured Post

New feature and membership benefit!

New feature! Upgrade and increase expert visibility of your issues with Priority Questions.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now