How to make a certificate that simulates a smart card for IIS site requiring client authentication -

i have project website authenticated smart card (dod cac). need make multiple test certificates site can use client authenticating session. seems possible have non-smartcard-based certificate user can choose client authentication.

i feel comfortable saying because when hit dev site on macbook, shows me 2 apple certificates. won't work because our authentication process requires short sequence of numbers @ end of common name.

i have tried many different things, cannot create certificate presents along dod cac certs when hitting site. in certificate manager mac certificate, doc cacs , test certs showing "client authentication" in intended purposes field. have self-signed cert used ca test cert in trusted roots.

the dod certs have "smart card logon" , "client authentication" in intended purposes field. can specify 1 eku when using makecert.exe, can make certificate "client authentication" or "smart card logon" value, not both. seem logical need certificate set "client authentication".

next i'm going try using certreq, read implied can set multiple values intended purposes it.

how can make own client authentication certificate website let me choose?

i have batch file maintain here: http://unmitigatedrisk.com/?p=28 makes simple pki testing purposes.

i made windows machine should able modify work on mac minor changes (basically switching sh command.com).

it uses openssl this, in set of certificates creates there client authentication certificate.

to import certificate mac need convert certificate , key pkcs#12 file.

you can update certificate profile script creates seeing openssl.cnf file.

hope helps.