Forum Discussion
Chanderjeet
May 08, 2019Copper Contributor
How to create CSR for MSIX Packaging
Hello - Our company is deciding to move to MSIX. We spoke to the admins and they are ready to provide code signing cert but they need the CN for raising the CSR. They say it needs to be a server ...
May 08, 2019
Your admins don't understand the difference between a server certificate and a code signing certificate. If you are creating a "self signed" code signing certificate using the Active Directory Certificate Services, the CN is something you make up, such as "CN=CompanyName" where CompanyName is the name of your company.
- ChanderjeetMay 09, 2019Copper Contributor
Thanks so much. Just so that its clear, we follow this and just change the CN to company name.
https://knowledge.digicert.com/solution/SO29005.html
And when you say "self signed" using AD CS you mean cert created using our internal CA and not a 3rd party service.
Sorry for being such a layman!
- May 10, 2019
Chanderjeet Yes. Generally you can ignore the OU= and the like; you only need the CN=. What is important is that whatever you put in that field you need to match it up.
- ChanderjeetMay 10, 2019Copper ContributorAnd Sir, match it up how and with what.
Example, we create a CSR with "CN=MonkeyMan Inc" --- now this CN will be looked up on the CA servers? How can we know that that the CN we are using is "lookupable" ?
Thanks for helping!