How can I get a Domain Controller to give me a ClickOnce Certificate

Question

I need to get hold of a new ClickOnce Certificate because my temporary one has expired. My applications are only used internally so I'd like to get a certificate from our Domain Controller so installation does not have a security prompt (and doesn't expire a quickly)

There are a number of Questions that come close to my issue: http://stackoverflow.com/questions/977621/signing-clickonce-with-a-certificate (Very close) http://stackoverflow.com/questions/121223/visual-studio-clickonce-deployment-certificate-expiration http://stackoverflow.com/questions/280472/how-can-i-renew-my-expired-clickonce-certificate

Answer 1

If your Domain Controller is already trusted, it seems very natural to simply start up Certificate Services on that DC and turn it into a CA. Once you get that set up, you will be able to request Code Signing certificates from the developer PCs through the Certificates Snap-in (MMC). The certificates will be in the name of the developer but we like that where I work because it conveys accountability.

BTW, we are running that exact same configuration at my company and it works like a charm.