App Control: How to Generate an IIS Self Signed Certificate in Powershell

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

How to generate a self signed certificate using powershell

Environment

• App Control Server: All Versions
• Microsoft Windows: All Supported Versions With Powershell

Resolution

1. Open Powershell as an administrator
2. Run the following command, replacing SERVERNAME with the DNS name needed (for either the site or agent connection)

   New-SelfSignedCertificate -DnsName SERVERNAME -KeyExportPolicy ExportableEncrypted -CertStoreLocation cert:Localmachine\My 

3. Check that the local certificates in MMC.exe is created successfully 

Additional Information

A self signed certificate is less secure than one verifiable by a third party. Please keep this in mind when deciding if a self signed certificate is required.