locked
How to create a self-signed certificate that is *.domain RRS feed

  • Question

  • Hi,

    I'm trying to configure Claims-based atuthetication for CRM 2011. This is a test. So, the procedure "Configuring Claims-Based Authetication" require a self-signed certificate.

    In IIS 7, the self-signed certificate is automaticaly issued to "Server_Name.domain_Name".

    I need a *.domain_name certificate.

    How to create a self-signed certificate issued to *.domain_name ?

    Thanks!

    Thursday, March 17, 2011 3:12 AM

Answers

  • Hi Marc,

    I created the certificate.  I can continue to the next step.

    That help me.

    Thanks,

    • Marked as answer by danBern Friday, March 18, 2011 1:55 AM
    Friday, March 18, 2011 1:55 AM

All replies

  • Hi danBern

    You can use a tool such a makecert.exe which can be downloaded from Microsoft.  Its command based and once the certificate is created, it can be found in your personal certificte store.  You can also create SAN certificates this way. 

    Here is an example of a SAN certificate.

    makecert.exe -r -pe -n "CN=*.domain.co.uk, CN=crmserver_name" -b 01/01/2010 -e 01/01/2050 -eku 1.3.6.1.5.5.7.3.1 -ss my -sr localMachine -sky exchange -sp "Microsoft RSA SChannel Cryptographic Provider" -sy 12


    Marc Collins www.QGate.co.uk
    Thursday, March 17, 2011 10:27 AM
  • Hi Marc,

    I created the certificate.  I can continue to the next step.

    That help me.

    Thanks,

    • Marked as answer by danBern Friday, March 18, 2011 1:55 AM
    Friday, March 18, 2011 1:55 AM