Setting Key Usage attributes with Makecert

Question

Is it possible to set Key Usage attributes using makecert, or any other tool I can use to generate my own test certificates?

The reason I'm interested is that certificates used for BizTalk Server AS2 transport require a key usage of Digital Signature for signing and Data Encipherment or Key Encipherment for encryption/decryption, and I want to play around with this feature.

I see how to set enhanced key usage attributes with makecert, but not key usage.

Answer 1

You can use the -eku option to specify the key usage to your certificate.

See details here: http://msdn.microsoft.com/en-us/library/aa386968(VS.85).aspx