Quick SSL Certs For Local IIS Development

Aug 23, 2017
security dotnet
1 min read

You can use selfssl from the IIS 6 Resource Kit to quickly add self signed SSL certs for local development.

When installing select custom install and only install selfssl.exe.

Then you can run the following command:

selfssl /N:CN=site.local /V:9999 /T /S:2

CN is the hostname you want to register.
V is the number of days the cert is valid for.
S is the site Id.

On later versions of IIS it will error when trying to bind the cert to the site Id so you will have to do that yourself: Error opening metabase: 0x80040154

The good news is the cert will have already been added to the local store and the issuing authority trusted via the /T parameter you specified.