Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Platform: Windows 7 x64

Development: .NET 4

Web Server: HttpListener (IIS not installed, will not be installed :) )

Can Machine A generate a Certificate Signing Request for Machine B and have the cert given back by the CA (Machine C) installed on Machine B? Is there any magic that happens during CSR generation that ties it to Machine A? If Machine A CAN generate for Machine B, what is the minimum required information that would be needed to generate the CSR?

-Shane

share|improve this question
add comment

1 Answer

up vote 3 down vote accepted

You can generate the CSR wher ever you want. The thing is, the private key is created at the same time, and whichever server is using the signed certificate in the end also needs this private key. Usually you can export this private key on machine A and import it on machine B together with the (sigend) certificate.

The minimum information required for the CSR depends on the CA you are using.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.