Search code examples
certificatepfxmakecert

certificates with SDK tools (makecert, pvk2pfx)

I need to make two certificates: CA sert and Server cert.

I use this commands.

makecert -r -pe -n "CN=CACert" -a sha1 -sky signature -cy authority -sv CACert.pvk CACert.cer

certutil -addstore Root TGCA.cer

makecert -pe -n "CN=ServerCert" -a sha1 -sky exchange -ic CACert.cer -iv CACert.pvk -sv ServerCert.pvk ServerCert.cer

pvk2pfx -pvk ServerCert.pvk -spc ServerCert.cer -pfx ServerCert.pfx

Then I import ServerCert.pfx to certificate storage.

Why they do not contain private key in storage?

Solution

  • Why don't you try to generate pfx file by passing the private key password as an argument?

    Try it this way

    pvk2pfx -pvk ServerCert.pvk -spc ServerCert.cer -pfx ServerCert.pfx -pi password

    As the documentation says:

    /pi pvkpassword Specifies the password for the .pvk file.

    Source: http://msdn.microsoft.com/en-us/library/windows/hardware/ff550672(v=vs.85).aspx