'Makecert' for 2048 bits

Question

For my application I need to generate a certificate with 2048 bits. Is it possible to generate using the 'makecert.exe' tool?

If not, which tool can be used to generate the certificate?

You buy certificates. It costs more than 1024 bits. – Hans Passant Mar 01 '11 at 16:14 — Hans Passant, Mar 01 '11 at 16:14

score 1 · Answer 1 · answered Aug 24 '12 at 10:54

Yes, I created a configuration file (following MS documentation) to do the work which you can use with the following command (assuming that the conf file called config.inf) :

certreq -New config.inf csr_file

Here is the content of the configuration file (which you'll have to adapt to your need) :

; /!\ DON'T MODIFY THIS SECTION
[Version]
Signature = "$Windows NT$"

; Here are the TUNABLE THINGS
[NewRequest]
; Edit the subject to match your needs
Subject = "C=FR,ST=Ile De France,L=Paris,O=MyGroup,OU=MyTeam,CN=MySite"
; Indicate if the private key is exportable or not
Exportable = TRUE
; Minimum key length : 2048 bits
KeyLength = 2048
; Key Usages
KeyUsage = 0xe0
; Indicates if the certificate is stored in the machine store or not
MachineKeySet = TRUE
; Format of the output CSR file, you should not have to change that
RequestType = PKCS10
; Specify the provider used to generate the private/public key pair, you can
; list all the available providers by typing the following command :
; `certutil -csplist`
ProviderName = "Microsoft Enhanced RSA and AES Cryptographic Provider"
ProviderType = 24

Then, when you got back your certificate, you just have to import it with the following command :

certreq -Accept crt_file

Hope this will help :)

score 1 · Answer 2 · edited May 23 '17 at 12:26

1

See here: SO Question about makecert

Update

OpenSSL might be your answer.

edited May 23 '17 at 12:26

Community

1
1

answered Mar 01 '11 at 15:15

Tony Abrams

4,505
3
25
32

I read "If you use the makecert.exe file to generate your signing key pair, be aware that it only generates a 1024-bit key" in the link below: http://msdn.microsoft.com/en-us/library/bb756995.aspx. Is it true? – Sathish Mar 01 '11 at 15:30
You appear to be right. According to the documentation, it can only make 1024 bit keys. – Tony Abrams Mar 01 '11 at 15:55
Anyone can help out to create a certificate for 2048 bits? – Sathish Mar 02 '11 at 05:05

score 0 · Accepted Answer · edited Dec 15 '18 at 20:13

0

I used Makecert with 2048 bits options. It works fine. I don't the earlier statement said on the MSDN site. But it works fine.

edited Dec 15 '18 at 20:13

Peter Mortensen

30,738
21
105
131

answered Mar 04 '11 at 08:23

Sathish

869
2
13
28

'Makecert' for 2048 bits

3 Answers3

Linked