Thursday, February 20, 2014

Creating a Self-Signed SSL Certificate in Windows without IIS (for SSRS, for instance)

Sometimes you have need for a SSL certificate on a Windows server when you don't have IIS installed.  Like when you want to install SQL Server Reporting Services (SSRS).

You could use OpenSSL, or download the 1+GB Windows SDK to get the makecert utility.  But those are troublesome, each in its own way.

Happily, it's still possible to use the IIS 6 resource kit's SelfSSL, even without having IIS installed.  And that's only a 5MB download.  Plus, you can install only the SelfSSL piece, which is something like 50kB.  Much, much better.

So, download it from this link.  Install it on the server you want, and then run selfssl as below:

Note two things:
  1. Run the command prompt as administrator
  2. You'll get an error, on account of not having IIS running on the server.
The error is OK:  the certificate is installed in the computer personal certificate store.  You can view it this way.

If trust is important on the server, you can use the /T switch for selfssl, and it will automatically add the certificate to the trusted root CA certificate folder, as well.


Posted by at
Labels: , , , ,

12 comments:

  1. AnonymousSeptember 24, 2015 at 10:21 AM

    Thank you.

    ReplyDelete
  2. AnonymousSeptember 24, 2015 at 12:10 PM

    You can also take a look here: http://stackoverflow.com/questions/19441155/how-to-create-a-self-signed-certificate-for-a-domain-name-for-development (the Powershell answers).

    Thank you!

    ReplyDelete
  3. UnknownFebruary 16, 2016 at 12:42 AM

    Where does it put the cert??

    ReplyDelete
    Replies
    1. LaneMarch 2, 2016 at 12:43 PM

      Good question. Windows doesn't store certificates like Linux does, in a directory that's easy to navigate. Instead, you access Windows certificates using a MMC plug-in. To run it, just run mmc, and then go to file-> Add/Remove Snap-in, and select Certificates.

      When you click on Add, it'll ask you if you want to use your personal or computer or service account. Select Computer.

      The newly-created cert will be in the Personal certificates store, there.

      Delete
  4. UnknownFebruary 2, 2018 at 6:39 AM

    SVS Online Trainings provides best online training classes svs online tarinings on SAP, BIGDATA , Hadoop ,AWS , Devops , RAC , Exadata , oracle 12cDBA , Goldengate , Shareplex etc

    ReplyDelete
  5. UnknownAugust 23, 2018 at 2:46 PM

    Exactly what I needed.

    ReplyDelete
  6. CharlesdayApril 10, 2020 at 5:03 AM

    I wanted to leave a little comment to support you and wish you a good continuation. Wishing you the best of luck for all your blogging efforts. USA RDP

    ReplyDelete
  7. James jonesJuly 14, 2020 at 5:36 AM

    The Case For HIIT Cardio – Why You Should Concider it… By the way you might want to check out this cool site I found…… website design

    ReplyDelete
  8. keivi jhonsJuly 14, 2020 at 7:17 AM

    many thanks for telling!. “Truth is generally the best vindication against slander.” by Abraham Lincoln.. web design

    ReplyDelete
  9. Sharon M JenkinsAugust 19, 2020 at 4:49 AM

    A well written article, I just passed this onto a workflow that was doing somewhat analysis on this. Thanks for spending the time to talk about this topic. officejet pro 6968 setup

    ReplyDelete
  10. jamesNovember 8, 2020 at 12:01 PM

    Only strive to mention one's content can be as incredible. This clarity with your post is superb! Thanks a lot, hundreds of along with you should go on the pleasurable get the job done. CE certificate

    ReplyDelete
  11. Mubashir KhatriNovember 11, 2020 at 2:12 AM

    Yes i am totally agreed with this article and i just want say that this article is very nice and very informative article.I will make sure to be reading your blog more. You made a good point but I can't help but wonder, what about the other side? !!!!!!Thanks Cheap CRM

    ReplyDelete

Thanks for leaving a comment!

Subscribe to: Post Comments (Atom)