Generating a certificate at a Certification Authority

The instructions are provided for Microsoft Enterprise Certification Authority deployed on Windows Server 2016.

To generate a CSR-based certificate:

1. Open a previously created request file in any text editor and copy its contents to the clipboard.
2. In a browser, open the page of your Certification Authority: https://<server address>//certsrv/certrqxt.asp.

   The Submit a Certificate Request or Renewal Request page opens.

3. In the Base-64-encoded certificate request (CMC or PKCS #10 or PKCS #7) field, paste the request file contents that you copied at step 1.
4. In the Certificate Template drop-down list, select Subordinate Certification Authority.
5. Click Submit.

   The Certificate Issued page opens.

6. Do the following:
   1. Select the certificate file encoding.

      The application supports certificates in DER and Base64 encoding.

   2. Select the certificate format:
      • If you want to download an end certificate file with the CER extension that does not contain intermediate certificates, select Download certificate.
      • If you want to download the full chain of certificates in PKCS#7-container format with the P7B extension, select Download certificate chain.

      It is recommended to download the full chain of certificates to avoid problems associated with verifying intermediate Certification Authorities.

The certificate will be generated and saved on your computer in the browser's downloads folder.

Page top