Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Platform: Windows 7 x64

Development: .NET 4

Web Server: HttpListener (IIS not installed, will not be installed :) )

Can Machine A generate a Certificate Signing Request for Machine B and have the cert given back by the CA (Machine C) installed on Machine B? Is there any magic that happens during CSR generation that ties it to Machine A? If Machine A CAN generate for Machine B, what is the minimum required information that would be needed to generate the CSR?


share|improve this question
up vote 3 down vote accepted

You can generate the CSR wher ever you want. The thing is, the private key is created at the same time, and whichever server is using the signed certificate in the end also needs this private key. Usually you can export this private key on machine A and import it on machine B together with the (sigend) certificate.

The minimum information required for the CSR depends on the CA you are using.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.