• Decrease Text SizeIncrease Text Size

Creating self-signed PFX for SAML SSO

Creating self-signed PFX for SAML SSO

Steps to Create a 24Bit SHA256 | 3 year | .PFX File

 

 

Please find the steps below:

 

  1. Determine the URL: URLName.DomainName.Com
  2. Run PowerShell Run as an 'Administrator' and navigate to the following directory by entering the following command: cd documents
  3. Open MMC – Run as an ‘Administrator’ and Snap In ‘Certificates’ under Computer Account Graphical user interface, application
    Description automatically generated
  4. In PowerShell Run the following Command: New-SelfSignedCertificate -dnsname URLName.DomainName.Com -NotAfter (Get-Date).AddMonths(36) -CertStoreLocation cert:\LocalMachine\My FYI: The Certificate will now be in the MMC under Certifcate>Personal Text
    Description automatically generated
  5. Graphical user interface, application
    Description automatically generated with medium confidence
  6. Export the Following SSL ‘URLName.DomainName.Com from the MMC with the Private Key and Create a Password
  7. Screenshots Below to Export: Graphical user interface, text, application
    Description automatically generated Text
    Description automatically generated Graphical user interface, application, email
    Description automatically generated Graphical user interface, text, application
    Description automatically generated Graphical user interface, text, application
    Description automatically generated Graphical user interface, text, application, email
    Description automatically generated Graphical user interface, text, application
    Description automatically generated Graphical user interface, text, application
    Description automatically generated

 

  1. Navigate to the folder of: Documents and you will see your export of ‘URLNamedomainNameCom.pfx
  2. Navigate back to the MMC ‘URLName.DomainName.Com Right Click on the Certificate and Select ‘Delete’ and Yes to Confirm
  3. Navigate to PowerShell *Import the PFX file with the following command, this will now import the certificate created previously but now changing the CSP with the type 24 CSP required: Command Below: In PowerShell Run the following Command:

    certutil -p "YouNeedToCreateAPassword" -csp "Microsoft Enhanced RSA and AES Cryptographic Provider" -importpfx URLNamedomainNameCom.pfx

  4. To Confirm that it is SHA256.
  5. Back in the MMC Console in Personal>Certificate Right Click over your Certificate of URLName.DomainName.Com Select Open Graphical user interface, text, application
    Description automatically generated