"makecert.exe -ss" - Create Certificate in System Stores

Q

How to create a test certificate for myself and put it into "My - Personal" system certificate store directly using the "makecert.exe" command?

✍: FYIcenter.com

A

You can create a test certificate for yourself and save it in a system certificate store directly using "certmgr.exe -ss" command as shown in this tutorial.

C:\fyicenter>
"\Program Files\Microsoft Visual Studio 8\sdk\v2.0\bin\makecert.exe" 
-n "CN=Linda Dews" -ss My

Succeeded

C:\fyicenter>
"\Program Files\Microsoft Visual Studio 8\sdk\v2.0\bin\certmgr.exe" 
-s My

...
==============Certificate # 2 ==========
Subject::
  [0,0] 2.5.4.3 (CN) Linda Dews
Issuer::
  [0,0] 2.5.4.3 (CN) Root Agency
SerialNumber::
   0E 91 26 C9 08 DD 46 96 40 AE 62 12 17 7C EE 87
SHA1 Thumbprint::
      98DC5D0E FECEF6A4 6F515663 A2563E4E 58E1FC2C
MD5 Thumbprint::
      D37C8638 40BC4641 B4CF9145 286272A0
Key MD5 Thumbprint::
      67872C01 4B76337C 07F4892F 74322447
Provider Type:: 1 Provider Name:: Microsoft Strong Cryptographic Provider 
Container: JoeSoft KeySpec: 2
NotBefore::
  Thu Jul 26 19:28:44 2012
NotAfter::
  Sat Dec 31 19:59:59 2039

What you are getting from this tutorial:

  • 'makecert.exe -n "CN=Linda Dews" -ss My' creates a new public key and private key pair, sign the public key as certificate with "Root Agency" private key, and put the key pair and the certificate into "My" system certificate store, which is the "Personal" store on the "certmgr.msc" user interface.
  • 'certmgr.exe -s My' lists all certificate in "My" store to confirm that the new certificate is in there.

You can also run "certmgr.msc" and view "Personal" store to see Linda's certificate and private key.

 

"makecert.exe -ss" - Create New System Certificate Store

"makecert.exe -sk" - Specify Private Key Container

Certificate Generation Tool "makecrt.exe" on Windows

⇑⇑ Windows Certificates Tutorials

2012-08-09, 8564👍, 0💬