7

I'm trying to install Dynamics CRM 2011 RC and configure it for Internet Facing Deployment.

One of the requirements for this is a wildcard SSL certificate. Since I'm installing development/testing server, I don't have a budget for real certificate. So...

What is the easiest way to create Self Signed Wildcard SSL Certificate in Windows?

Joel Coel
  • 12,932
  • 14
  • 62
  • 100
David Vidmar
  • 173
  • 1
  • 1
  • 5
  • there are myriad options in linux that are EASY like tinyca...you could use the openssl executable on windows to do this, but it's a bit more complicated –  Jan 16 '11 at 21:26
  • Easy linux solutions are also appreciated! I do have some virtual Ubuntu images lying around... –  Jan 16 '11 at 21:33

2 Answers2

9

There isn't an EASY way, but the two that come to mind are:

First, For a web certificate, download the IIS6 Resource Kit tools, and use the SelfSSL.exe tool, choose *.example.com as the name and it will install to the certification database. You should be able to pull out the public/private key and use it however you want.

Second, is a much much harder way, Download the latest version of OpenSSL, and you should be able to generate it through that - I have only ever used it for an entire CA setup and never for a single certificate.

I found instructions for Linux, and it should be similar for Windows. Link here, with a few modifications. If you want help with what is needed for a full CA and/or can't find what you need, let me know and I'll try to find it out for you.

Joel Coel
  • 12,932
  • 14
  • 62
  • 100
William Hilsum
  • 3,536
  • 6
  • 29
  • 39
  • Tnx, Wil. It worked as a charm. Somehow I was underimpression that IIS 7 built in "create self-signed certificate" is the same as IIS resource kit tool. But obviously is not! –  Jan 16 '11 at 23:16
  • @David - the IIS7 tool is much easier for... creating self signed SSL certificates, however, the selfssl.exe from the toolkit is a lot more flexible and customisable. I do not know if there is anyway to manipulate/customise the IIS7 version, however, the IIS6 version does everything I need, so I nearly always end up going back to it. – William Hilsum Jan 17 '11 at 00:01
  • 1
    Looks like the link for IIS6 Resource Kit Tools is broken – Mog0 Apr 29 '20 at 10:10
1

There is an easy way in IIS!

Just launch IIS Management, select the server node and double-click the Certificates feature. Next, on the right side, click "Create Domain Certificate ..."

some guy
  • 11
  • 1