INF file parameters to use with the Certutil command for ProviderType, KeyUsage and other parameters.

i trying use certutil command inf file create custom entries send verisign. windows 2003 server.

i need enter correct entry providertype, keyusage, perhaps oid.

my requirments key usage need both digital signature , key encipherment. if use keyusage=0x20 give me both? or need 2 keyusage entries?

i need include extended key usage , include server authentication , client authentication. not sure parameter use.

here testing with.

not sure need add, change or remove.

keyspec = 1

keylength = 2048

exportable = true

machinekeyset = true
providername = "microsoft rsa
schannel cryptographic provider"

providertype = 12

requesttype = pkcs10

keyusage = 0x20

oid=1.3.6.1.5.5.7.3.1

[requestattributes]

certificatetemplate = template name 2003 v2 template

key usage must 0xa0 (not 0x20). inf should enough:

subject = "cn=www.domain.com, ou=web development, o=company name, c=us"
keyspec = 1
keylength = 2048
exportable = true
machinekeyset = true
providername = "microsoft rsa schannel cryptographic provider"
providertype = 12
requesttype = pkcs10
keyusage = 0xa0

just edit subject entry per needs.

---

my weblog: http://en-us.sysadmins.lv
powershell pki module: http://pspki.codeplex.com
windows pki reference: on technet wiki

Windows Server  >  Security