Questions tagged [certreq]

Command line SSL certificate request tool for Windows

15 questions
8
votes
2 answers

Is there a spec for CSR 'BEGIN' headers?

I've noticed a subtle difference in how OpenSSL and certreq generated PKCS10 CSRs: OpenSSL: -----BEGIN CERTIFICATE REQUEST----- Microsoft certreq: -----BEGIN NEW CERTIFICATE REQUEST----- (and a footer with the same, except for END) The…
mikemaccana
  • 110,530
  • 99
  • 389
  • 494
5
votes
2 answers

WinRm - Cannot create a WinRM listener on HTTPS due to incorrect SSL certificate

I want to use WinRM with https transport. I've bought a Comodo certificate (the error states I cannot use a self-signed certificate) with the Subject matching my FQDN (Full computer name in System) of my Windows 10 computer (not domain joined): CN =…
RHAD
  • 1,317
  • 3
  • 13
  • 37
4
votes
1 answer

Creating certificate with certreq tool where I have csr generated using openssl

I have created CSR using openssl and I want it to be signed by the Microsoft CA using command line with template as webServer.
Joshi
  • 573
  • 3
  • 11
  • 24
3
votes
0 answers

What is the purpose of template in Microsoft CA?

I'm using a Microsoft Certification authority to sign some certificates from a corporate network. Using the certreq utility everything works fine, but I didn't found the purpose of the template anywhere. In my case, I need to create some…
James
  • 1,653
  • 2
  • 31
  • 60
2
votes
1 answer

AWS CloudHSM error on Windows Server: Certificate Request Processor: Provider type not defined. 0x80090017 (-2146893801 NTE_PROV_TYPE_NOT_DEF)

When generating a CSR on Windows Server using the AWS CloudHSM service, I obtain the following error: certreq.exe -new my-request.inf my-request.csr Certificate Request Processor: Provider type not defined. 0x80090017 (-2146893801…
2
votes
1 answer

Importing .cer certificate from cmd

Importing a .cer certificate with certutil utility can't manage to match it with its private key although the certificate signing request was created on the same machine. I'm using certreq to generate the .csr file used for getting this certificate…
Mihai
  • 371
  • 3
  • 14
2
votes
0 answers

Scripting user enrollment on Microsoft AD CS

I need to be able to auto-enroll a huge number of users using Microsoft AD CS. I have create a certificate template that these users are able to auto-enroll with. I now need to create the requests and accept the certificates automatically, without…
Iansus
  • 198
  • 1
  • 12
1
vote
3 answers

How to suppress a popup window while using certreq to request a certificate from an enterprise CA?

I am trying to request a certificate from a machine that is in the same domain as our enterprise CA server. Everything is working fine but I'm one step away from making my script have zero user interaction. I basically modified the following script…
DivZ
  • 678
  • 12
  • 20
0
votes
0 answers

Ignore popup windows when executing powershell script Request-Certificate.ps1

In order to request a User ceritificate I'm using the script provided by the Powershell gallery https://www.powershellgallery.com/packages/Request-Certificate/1.5.0/Content/Request-Certificate.ps1 To execute this script I'm using the following…
Sam
  • 247
  • 5
  • 16
0
votes
1 answer

Private key from Certificate generated with certreq is not exportable

I have created a Certificate with an inf-file and certreq with the following settings: $InfFile = @" [NewRequest]`r FriendlyName = $FQDN Subject =…
0
votes
1 answer

Generating private key in a file using certreq in powershell

I am using a powershell script to create Certificate Signing Request (CSR) using certreq. I need the private key in a file but the script is not generating that. I tried looking the documentation of certreq and other resources but found nothing. In…
Karan
  • 752
  • 2
  • 13
  • 34
0
votes
1 answer

Certreq New INF File

I want to creat a Certificate Request with the Certreq.exe Command. To start a new request I need the mandatory inf file. There is my problem, I need a inf file which creates, except the normal Variables (CN, O, OU, Provider, length ...) exact the…
Anetair
  • 150
  • 1
  • 2
  • 13
0
votes
1 answer

certreq -submit commnd asks to choose one of the 2 Certificate Authorities

I am using the below ini file: [NewRequest] Subject = "CN=TestCN,SERIALNUMBER=TestSN,O=Test,L=Test,C=UK" Exportable = TRUE ExportableEncrypted = TRUE HashAlgorithm = Sha256 KeyLength = 256 MachineKeySet = True FriendlyName =…
Kumar
  • 63
  • 1
  • 10
0
votes
1 answer

invoking certreq via powershell

I am trying to build tool which would renew expired certs and I am strugling with invoking certreq command: this one is working: Invoke-Command -ComputerName $Srvname -ScriptBlock {Set-Location -Path 'D:\'; $Out = cmd /c 2>&1 'certreq -q -f -new…
user5711825
  • 85
  • 1
  • 1
  • 11
0
votes
1 answer

How do I show the certificate thumbnail for a newly created certificate using certreq in powershell?

I am using the following command in PowerShell which works fine and good: certreq -accept -machine "c:\my_csr_response.crt" This command processes a CA response to a SSL CSR. My question is how do I get the thumbnail of the newly created…