Windows OpenSSL CA Toolkit

Installation and Configuration

RSA CONFIDENTIALINTERNAL USE ONLY

Toolkit usage
Generate new certificates with your CA quickly and easily for:
Windows Services (IIS, ADAM, etc.)
Windows Active Directory (AD) Domain Controllers without installing or managing the Windows Enterprise Certificate
Authority
Any standard certificate for client and/or server authentication
Sign certificate signing requests
Generate Java JKS keystore files for use with Tomcat, Access Manager, BEA Weblogic.

RSA CONFIDENTIALINTERNAL USE ONLY

Softwares
1. Download OpenSSL http://
slproweb.com/products/Win32OpenSSL.html
2. Download OpenSSL toolkit http
://slproweb.com/products/Win32OpenSSL.html

Copyright 2015 EMC Corporation. All rights reserved.

Installation
1. Install OpenSSL in C\OpenSSL directory.

2. Unzip opensslcatools zip to your CA directory, i.e.

c:\openssl\myca

Copyright 2015 EMC Corporation. All rights reserved.

Certificate generation
CA certificate:
1. Open command prompt.
2. Navigate to your CA directory.. i.e. cd \OpenSSL\myca
3. Execute createca.cmd c:\openssl myca command.
4. Proceed with the instruction displayed.
5. Set the CA certificate password.
6. Now you will be asked for Location, Org and other parameters,
provide all and continue.
7. Once all the parameters are given, CA will get generated and
ready to use.
8. Install the CA as Trusted Root Certificate Authority using
MMC.

Copyright 2015 EMC Corporation. All rights reserved.

 Certificate Generation (Client/Server):

1. Navigate to c:\openSSL\myca.
2. Execute gencert.cmd with no parameters will to instruction.
3. For generating certificate for Windows Domain Controller, run
gencert.cmd msdc FQHN.
Eg: gencert.cmd msdc "iis.axmtest.com
4. You will be asked to enter CA passphrase, (Enter passphrase
which you entered while creating CA certificate)
5. Follow the instruction on screen.
6. Enter password for certificate when asked and hit enter.
7. This will generate a certificate that can be used by a domain controller
to perform LDAP SSL operations

Copyright 2015 EMC Corporation. All rights reserved.

 Reference: https://inside.emc.com/docs/DOC-5973

Copyright 2015 EMC Corporation. All rights reserved.

EMC, RSA, the EMC logo and the RSA logo are trademarks of EMC Corporation in the U.S. and other countries.