Updated: Create iOS Certificate Signing Request and .p12 file on Windows

Generate the Certificate Signing Request file and create a .p12 file all on a Windows machine.

Here are the command-line instructions:

[jayjunkstone]

Brent you are THE MAN! Thank you. Keep it up. Good to see you back!

[nicolasdesaulniers-soucy]

Thanks for the tutorial! I ran into a problem because the latest available OpenSSL distributable (1.1.x) doesn't seem to have a openssl.cfg file, in the bin directory or anywhere I could locate. To remedy that problem, I downloaded the version 1.0.2 of OpenSSL instead and the procedure works like a charm.

[chase-bank]

For someone going it alone... The process of getting these apps compiled/loaded/submitted ends up being half the battle. Detailed guides like this are priceless... Thanks for taking the time to share!

[hambaku]

This was extremely helpful, thank you so much.

[asmalki]

It's unbelievable how companies with unlimited resources fail to properly document their process. Good job man!

[mikeberry]

I am several years behind in creating an ios app and I don't have a Mac. I had a couple of rough starts -- needed to log in to the command file as an administrator. Also the openssl.cfg file was not in the 'light' version so I had to download the full version. After that, everything ran perfectly! THANK YOU

[contrarian]

If I install OpenSSL Lite, there is no "openssl cfg". I had to install the full version to get this file (Win10 x64)

[robertquinones]

by right clicking on the start menu and clicking run, i got this error when trying to generate mykey.key, "openssl genrsa: Can't open mykey.key for writing, Permission denied" . Instead i had to click on the start menu and type "Command Prompt" and click on "Run as Administrator" the rest of the directions worked perfectly.

[georgiypadalko]

Thank you so much. I face this task every year and every time I just use your video as a step-by-step guide. Thank you, Brent!

[stepanFiala]

Great tutorial, thanks! Just one note: openssl.cfg is only included in the full version of OpenSSL (v3.0.2).

[BrutishSailr]

C:\OpenSSL-Win64\bin>set

C:\OpenSSL-Win64\bin>openssl genrsa -out 2048
Generating RSA private key, 2048 bit long modulus


unable to write 'random state'

[harmanbans]

Brent, fantastic video! Great pacing and very informative and easy-to-follow, especially for beginners. You just earned a new subscriber.

[shawneklassen]

Everything is working until I run the 3rd command and then I get this error Can't open for reading, No such file or directory
10244:error:02001002:system library:fopen:No such file or directory:crypto\bio\bss_file.c:69:fopen('c:\OpenSSL-Win64\bin\openssl.cfg', 'r')
10244:error:2006D080:BIO routines:BIO_new_file:no such Do you know what I did wrong?

[brunooliveirasilva]

iBrent, congrats for your sharing. Its perfect! Helped a lot us here in Brazil!

[bernardusmuller]

Make sure you use .CER and not .CRT if you have that file extension.

[sgnlx_ai]

No openssl.cfg file in bin folder? -> Download the full version instead of the light version.

[SavageBeastChronicles]

Many thanks ! Really helpful and reducing time to create the certificates !

[craigandrews]

Well done. Easy to follow along and worked perfect.

[harleywildman]

Really appreciate the tutorial. And it was really easy to follow. Keep up the good work brother!

[tomaszgolinski]

Thanks, saved my ass :)
very easy to follow