Hi,

I am developing a console application. This application generates a self signed certificate and installs it in the current machine's certificate store.

The steps invlolved are :-

1. Generate a certificate

2. Create a pfx file

3. Install the pfx file

For these steps i would need a password for protecting the private key and the pfx file.

However these passwords are used only during the execution of the exe.

Should I auto generate a password using some random number generation algorithm or accept the password as input from the user?

What are the security issues involved in both the scenarios ?

Thanks

Vivekanand