Adding Self-Signed PKI to Windows Trusted Certificate Store

Channel:
Subscribers:
14,500
Published on ● Video Link: https://www.youtube.com/watch?v=JRfXfwGSREg



Category:
Tutorial
Duration: 3:25
1,040 views
12


#PublicKeyInfrastructure #Certificates #Windows

Full steps can be found at https://i12bretro.github.io/tutorials/0006.html

This is part two of a series of creating your own self-signed PKI and some ways to utilize the PKI to setup SSL for your web server or create your own OpenVPN server.
 
Disclaimer: I am not a security expert. This is just the easiest way I have found to create and utilize SSL for my homelab services.
 
--------------------------------------------------------------------
Prerequisites
--------------------------------------------------------------------
   - A XCA PKI database  https://youtu.be/ezzj3x207lQ
 
--------------------------------------------------------------------
Exporting Certificates from XCA
--------------------------------------------------------------------
   01. Launch XCA
   02. Open the PKI database if it is not already (File ≫ Open DataBase), enter password
   03. Click on the Certificates tab
   04. Right click the Intermediate CA certificate ≫ Export ≫ File
   05. Set the file name with a .crt extension and verify the export format is PEM (*.crt)
   06. Click OK
   07. Right click the Root CA certificate ≫ Export ≫ File
   08. Set the file name with a .crt extension and verify the export format is PEM (*.crt)
   09. Click OK
 
--------------------------------------------------------------------
Importing Certificates Into Windows Certificate Store
--------------------------------------------------------------------
   01. Right click the Start Button ≫ Run
   02. Type mmc.exe, press enter
   03. Click File ≫ Add/Remove Snap-in...
   04. Click Certificates
   05. Click Add
   06. Select Computer account
   07. Click Next
   08. Select Local computer
   09. Click Finish
   10. Click OK
   11. Expand Certificates ≫ Trusted Root Certification Authorities
   12. Right click the second level Certificates ≫ All Tasks ≫ Import....
   13. Click Next
   14. Click Browse ≫ Select the exported Root CA .crt file ≫ Click Next
   15. Verify Include all extended properties is checked
   16. Click Next
   17. Click Next
   18. Click Finish
   19. Expand Certificates ≫ Intermediate Certification Authorities
   20. Right click the second level Certificates ≫ All Tasks ≫ Import....
   21. Click Next
   22. Click Browse ≫ Select the exported Intermediate CA .crt file ≫ Click Next
   23. Verify Include all extended properties is checked
   24. Click Next
   25. Click Next
   26. Click Finish
 


### Connect with me and others ###
★ Discord: https://discord.com/invite/EzenvmSHW8
★ Reddit: https://reddit.com/r/i12bretro
★ Twitter: https://twitter.com/i12bretro







Tags:
Certificate Authority
Certificates
HTTPS
How To
How To Add Self-signed Certificates To Windows
How To Create Self-Signed Certificates
Microsoft Windows
PKI
Public Key Infrastructure
SSL
SSL Certificates
Self-Signed
Self-Signed Certificate
Self-Signed HTTPS
Self-Signed PKI
Self-Signed SSL
Tutorial
Windows
Windows Trust Self-Signed Certificates
Windows Trusted Certificates
X Certificate And Key Management
X Certificate Key Manager
XCA
i12bretro