Re: Auto certificate and key generation to pfx

From: David Cross [MS] (dcross_at_online.microsoft.com)
Date: 04/14/05


Date: Thu, 14 Apr 2005 05:35:19 -0700

No, certificate server does not return a PFX file, you would have to export
the key pair and certificate after it had been generated and issued.

-- 
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Top Whitepapers:
Auto-enrollment whitepaper: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/autoenro.mspx
Best Practices for implementing Windows Server 2003 PKI: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx
Troubleshooting Certificate Status and Revocation whitepaper: 
http://www.microsoft.com/technet/security/topics/crypto/tshtcrl.mspx
Windows Server 2003 web enrollment and troubleshooting guide: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx
"Gary" <gman@discussions.microsoft.com> wrote in message 
news:100601c54015$25ffa910$a501280a@phx.gbl...
> Hi,
>
> Is it was possible to use the Crypto API and a certificate
> server to automate the generation of a certificate and its
> keypair, and export to a pfx file?
>
> For example, is it possible to pass all the information
> such as the subject name, the type of certificate, the
> hashing algorithm, validity period, etc in a string (or
> equivalent) along with a private key password which would
> then be processed by the certificate server. The cert
> server would then return the generated cert and keypair in
> a pfx file or just the cert in a cer file (or both formats
> if requested)...
>
> Thanks,
> Gary.
>