Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I want to sign a .NET assembly with a code signing certificate from my local domain CA.

I tried sending a certificate request and got back a signed certificate from my local domain CA in my local certificate store. However this certificate cannot be used to sign my assembly in Visual Studio.

Since there's the option to import a CA certificate from a .pfx file, I asked my domain admin to create a new certificate and export it to .pfx for me - however he couldn't find a way to do so.

In-house Trusted Certificate describes the same problem but none of the answers actually tells how to specifically create a cert for code signing.

share|improve this question
add comment

1 Answer

You need to have your domain admin issue what I believe is called an intermediate CA cert, so that you can sign certs on behalf of the parent CA. Your device would become the intermedia CA and would not ask any other device for certificate signing.

share|improve this answer
    
I'd rather not have my developer machine being a CA so I'll keep searching how to get a cert from my local domain CA. –  Filburt Nov 16 '11 at 8:36
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.