How to create a Self Signed Certificate that has a digital signature?

News Knowledge Base
,
1

UiPath Orchestrator showing ERR_SSL_KEY_USAGE_INCOMPATIBLE when using a self-signed certificate.

  1. Create the Certificate

$cert = New-SelfSignedCertificate -FriendlyName "MyServerSSL" -DnsName “example01” -CertStoreLocation "cert:\LocalMachine\My" -KeyUsage DigitalSignature,KeyEncipherment,DataEncipherment -KeyAlgorithm RSA -HashAlgorithm SHA256 -KeyLength 2048 -KeyUsageProperty All -Provider "Microsoft Enhanced RSA and AES Cryptographic Provider" -NotAfter (Get-Date).AddYears(5)

  1. Define a password

$pwd = 'bl@hbl4hBlah'

  1. Convert it to a secure string

$SSpwd = ConvertTo-SecureString -String $pwd -Force -AsPlainText

  1. Export the cert to a PFX file

Export-PfxCertificate -Cert "Cert:\LocalMachine\My\$($cert.Thumbprint)" -FilePath custom_cert.pfx -Password $SSpwd

  1. Export public key

Export-Certificate -Cert "Cert:\LocalMachine\My\$($cert.Thumbprint)" -FilePath custom_public.cer

  1. Once exported, be sure to use the public key certificate for all Robots and users wanting to use Orchestrator.