How to generate 2048 Bit Certificate with Makecert.exe?

The makecert.exe tool which comes with VS2010 can generate up to 1024 bit certificate. To create a 2048 bit certificate you would need makecert.exe from the Windows SDK 7.1. The details are as below:

 

Step 1: Download Windows SDK 7.1 from the link below:

http://www.microsoft.com/download/en/details.aspx?id=8279

Step 2: Be sure that you have makecert.exe version 6.1.7600.16385 as below:

Step 3: Now open the Window SDK command prompt window as below:

Step 4: In the opened command windows type the command as below:

 C:\Windows\system32>makecert -r -pe -n "CN=Avkash Azure Cert2048" -a sha1 -ss My -len 2048 -sy 24 -b 09/01/2011 -e 01/01/2018
 
 Succeeded
 

Step 5: Now launch certificate manager using certmgr.msc and verify the certificate as below:

 

 

Note: If you are generating certificate for Windows Azure, please use –pe option with makecert.exe so the private key can be exportable. If certificate private key is not exportable you could not upload the certificate to for your Windows Azure application.