Creating a self signed certificate for Bitlocker network unlock

[Tornado23]

While following a guide on the microsoft website on how to enable Bitlocker network unlock

title of the guide is = How to enable Network Unlock (sorry i cant post links acount is still not verified )

I got stock on step 4 and 5 trying to create a self signed certificate


I Created the text file on my desktop ran the command exactly the way it is but i don't see any .cer file could it be that the path i entered is wrong and what part do i need to specify the path please help.

........................................................instructions below ........................................................

To create a self-signed certificate, do the following:

1. Create a text file with an .inf extension. For example, notepad.exe BitLocker-NetworkUnlock.inf

2. Add the following contents to the previously created file

[NewRequest]

Subject="CN=BitLocker Network Unlock certificate"
Exportable=true
RequestType=Cert
KeyUsage="CERT_KEY_ENCIPHERMENT_KEY_USAGE"
KeyLength=2048
KeyUsage=0x30
KeySpec=1
ValidityPeriod=Years
ValidityPeriodUnits=10

[Extensions]
Bitlocker Drive Encyption = "{text}"
_continue_ = "OID=1.3.6.1.4.1.311.67.1.1"

Bitlocker Drive Encryption = "{text}"
_continue_ = "1.3.6.1.4.1.311.67.1.1"


3. Open an elevated command prompt and use the certreq tool to create a new certificate using the following command, specifying the full path to the file created previously, along with the file name:

certreq -new BitLocker-NetworkUnlock.inf BitLocker-NetworkUnlock.cer



4. Verify the previous command properly created the certificate by confirming the .cer file exists.

Continue reading...