---
title: "Creating Self-Signed Certificate for Token Signing"
slug: "creating-self-signed-certificate-for-token-signing"
updated: 2023-11-14T10:22:24Z
published: 2023-11-14T10:22:24Z
canonical: "help.lanteria.com/creating-self-signed-certificate-for-token-signing"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.lanteria.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Creating Self-Signed Certificate for Token Signing

*Note**Please use the client name instead of sp13g in the scripts below.*

Download [makecert.exe](https://download.lanteria.com/utilities/makecert.exe), start the command prompt, navigate to location where makecert.exe is downloaded and execute the following commands:

Certificate Authority (CA)

```shell
.\makecert -r -pe -n "CN=sp13gRoot" -a sha512 -sky signature -cy authority -sv sp13gRoot.pvk -len 4096 -e 01/04/2099 sp13gRoot.cer
```

Now let's create a certificate using our CA.

Certificate

```shell
.\makecert -pe -n "CN=sp13g" -a sha512 -len 4096 -sky exchange -ic sp13gRoot.cer -iv sp13gRoot.pvk -sv sp13g.pvk sp13g.cer
```

Now we need a private key to be created from pvk, so let's do that using the pvk2pfx tool, ensuring you export the private key when prompted.

PFX

Download [pvk2pfx.exe](https://download.lanteria.com/utilities/pvk2pfx.exe), start the command prompt, navigate to location where pvk2pfx.exe is downloaded and execute the following commands:

```shell
.\pvk2pfx -pvk sp13g.pvk -spc sp13g.cer
```

As a result of this step, you'll have the following:

- CA: Installed in your Local Machine’s Trusted Root Certification Authorities store
- PFX: Installed in your Local Machine’s Personal store, with private keys set to exportable
- Certificate: will be used in the application configuration

*Note**The CA Certificate must be installed as 1st certificate.*