Generating a certificate at a Certification Authority

These instructions are applicable to a Microsoft Certification Authority deployed on Windows Server 2016.

To generate a PFX certificate with a private key:

1. In a browser, open the page of your Certification Authority: https://<server address>/certsrv/certrqma.asp.

   The Advanced Certificate Request page opens.

2. In the Certificate Template drop-down list, select Subordinate Certification Authority.
3. In the Identifying Information For Offline Template settings group, fill in your company information.

   The Name field is required.

4. In the Key Options settings group:
   1. Select the Create new key set option.
   2. In the Key Size field, enter the value 2048.
   3. Select the Automatic key container name option.
   4. Select the Mark keys as exportable check box.
5. In the Additional Options settings group, make sure that the Save request check box is cleared.
6. Click Submit.

   The Certificate Issued page opens.

7. Select Install this certificate.

A certificate with a private key will be generated and stored in the certificate storage of your user account.

Page top