Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I'm trying to install Dynamics CRM 2011 RC and configure it for Internet Facing Deployment.

One of the requirements for this is a wildcard SSL certificate. Since I'm installing development/testing server, I don't have a budget for real certificate. So...

What is the easiest way to create Self Signed Wildcard SSL Certificate in Windows?

share|improve this question

migrated from superuser.com Jan 17 '11 at 7:43

This question came from our site for computer enthusiasts and power users.

there are myriad options in linux that are EASY like tinyca...you could use the openssl executable on windows to do this, but it's a bit more complicated –  aking1012 Jan 16 '11 at 21:26
Easy linux solutions are also appreciated! I do have some virtual Ubuntu images lying around... –  David Vidmar Jan 16 '11 at 21:33

1 Answer 1

up vote 6 down vote accepted

There isn't an EASY way, but the two that come to mind are:

First, For a web certificate, download the IIS6 Resource Kit tools, and use the SelfSSL.exe tool, choose *.domain.com as the name and it will install to the certification database. You should be able to pull out the public/private key and use it however you want.

Second, is a much much harder way, Download the latest version of OpenSSL, and you should be able to generate it through that - I have only ever used it for an entire CA setup and never for a single certificate.

I found instructions for Linux, and it should be similar for Windows. Link here, with a few modifications. If you want help with what is needed for a full CA and/or can't find what you need, let me know and I'll try to find it out for you.

share|improve this answer
Tnx, Wil. It worked as a charm. Somehow I was underimpression that IIS 7 built in "create self-signed certificate" is the same as IIS resource kit tool. But obviously is not! –  David Vidmar Jan 16 '11 at 23:16
@David - the IIS7 tool is much easier for... creating self signed SSL certificates, however, the selfssl.exe from the toolkit is a lot more flexible and customisable. I do not know if there is anyway to manipulate/customise the IIS7 version, however, the IIS6 version does everything I need, so I nearly always end up going back to it. –  William Hilsum Jan 17 '11 at 0:01

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.