Creating Self Signed Certificate

There is many ways to create your own Self-Signed certificate. Here I show you two methods:

Method1: Using IIS

See following document to Create a Self-Signed Server Certificate in IIS 7 using IIS: Create a Self-Signed Server Certificate in IIS 7

Method2: Using command-line

There is a batch file that uses Microsoft "makecert.exe" and "pvk2pfx.exe" Tools​.

1. ​Download "CreateRootCertificate.zip" file and extract it.
2. Run "_CreateRoot.bat".
3. Select "None" when it prompts Create Private Key Password. Note: You can edit "_CreateRoot.bat" and change "CerFileName" and "CN" parameters to set your own name for the file and certificate subject.

Note: CN should contain your domain address such as machine.yourdomain.com

Installing Self Signed Certificate

The major difference between Self Signed Certificate and valid certificate is that Self Signed Certificate will not be accepted by client machine unless you install it manually in "Trusted Root Certification Authroties" of users' local machine. Here a batch file to do this:

1. Download InstallRootCertifcate.zip
2. Extract it and put your certificate in extracted folder.
3. Run install.vbs on client machine.

Note: You can install it manually from your system Certificate Manager.