Trying to generate a custom CSR using certificates snap-in. Only legacy crypto providers can be used.

[Cohen Hank]

I'm trying to generate a custom CSR but if I choose (no template) CNG key. I will get the error "One or more of the object's poroperties are missing or invalid".The request has the following parameters (edited for PII protection)CN=<my initials>, C=<My Country>, O=<My company>, OU=<my department>, E=<my email>Extensions: Key Usage = Digital Signature, Extended Key Usage = Client AuthenticationChoosing (No template) Legacy Key, will work but I want an ECC key and the legacy providers don't support ECC.This is apparently not a common failure. Google finds very few

Continue reading...