How to create CSR for MSIX Packaging

Question

Hello -&nbsp;Our company is deciding to move to MSIX. We spoke to the admins and they are ready to provide code signing cert but they need the CN for raising the CSR. They say it needs to be a server name but we dont know what that might be.&nbsp;Can someone please suggest what should be the CN when raising the CSR?

timothy_mangan · Answer

Your admins don't understand the difference between a server certificate and a code signing certificate.  If you are creating a "self signed" code signing certificate using the Active Directory Certificate Services, the CN is something you make up, such as "CN=CompanyName" where CompanyName is the name of your company.

chanderjeet · Answer

TIMOTHY_MANGAN&nbsp;&nbsp;Thanks so much. Just so that its clear, we follow this and just change the CN to company name.&nbsp;https://knowledge.digicert.com/solution/SO29005.html&nbsp;And when you say "self signed" using AD CS you mean cert created using our internal CA and not a 3rd party service.&nbsp;Sorry for being such a layman!

timothy_mangan · Answer

Chanderjeet&nbsp; Yes.&nbsp; Generally you can ignore the OU= and the like; you only need the CN=.&nbsp; What is important is that whatever you put in that field you need to match it up.

chanderjeet · Answer

And Sir, match it up how and with what.Example, we create a CSR with "CN=MonkeyMan Inc" --- now this CN will be looked up on the CA servers? How can we know that that the CN we are using is "lookupable" ?Thanks for helping!

dan gough · Answer

Chanderjeet&nbsp;the packages you create will have a publisher name set, e.g. CN=Contoso. That will need to match up with the name set when you generated your self-signed certificate.

Forum Discussion

How to create CSR for MSIX Packaging

5 Replies

Resources