I want to sign a .NET assembly with a code signing certificate from my local domain CA.

I tried sending a certificate request and got back a signed certificate from my local domain CA in my local certificate store. However this certificate cannot be used to sign my assembly in Visual Studio.

Since there's the option to import a CA certificate from a .pfx file, I asked my domain admin to create a new certificate and export it to .pfx for me - however he couldn't find a way to do so.

In-house Trusted Certificate describes the same problem but none of the answers actually tells how to specifically create a cert for code signing.


You need to have your domain admin issue what I believe is called an intermediate CA cert, so that you can sign certs on behalf of the parent CA. Your device would become the intermedia CA and would not ask any other device for certificate signing.

  • I'd rather not have my developer machine being a CA so I'll keep searching how to get a cert from my local domain CA. – Filburt Nov 16 '11 at 8:36

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.