Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to sign a .NET assembly with a code signing certificate from my local domain CA.

I tried sending a certificate request and got back a signed certificate from my local domain CA in my local certificate store. However this certificate cannot be used to sign my assembly in Visual Studio.

Since there's the option to import a CA certificate from a .pfx file, I asked my domain admin to create a new certificate and export it to .pfx for me - however he couldn't find a way to do so.

In-house Trusted Certificate describes the same problem but none of the answers actually tells how to specifically create a cert for code signing.

share|improve this question

You need to have your domain admin issue what I believe is called an intermediate CA cert, so that you can sign certs on behalf of the parent CA. Your device would become the intermedia CA and would not ask any other device for certificate signing.

share|improve this answer
I'd rather not have my developer machine being a CA so I'll keep searching how to get a cert from my local domain CA. – Filburt Nov 16 '11 at 8:36

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.