1. Use the special utility to generate a new server certificate with the following input parameters:
   • fqdn – server name
   • validity – certificate validity period specified in days (10 years by default)
   • out – certificate name
   • pwd – password (not set by default)

To generate a certificate named cert.pfx with the 1234 password and a 10 year validity period for server myfqdn.com, enter the following command:

klsrvcertgen2.exe -fqdn myfqdn.com -validity 3650 -out cert.pfx -pwd 1234

2. Open the Administration Server properties and go to the Web server section.
3. Select Specify another certificate and click Change.

4.  Select PKCS #12 container, specify the path to the certificate file and click OK.

The certificate will be generated and installed. 

1. Open the Certification Authority and go to Certificate Templates → Manage.

2. Right-click the Web server template and select Duplicate Template from the shortcut menu.

3. Enter a name for the new template and check the remaining parameters. Click OK.

4. In the Certification Authority, go to Certificate Templates → New → Certificate Template to Issue. 

5. Select the template you have created from the list and click OK.

6. Open the Certificates Console (certlm).
7. Right-click on the folder containing personal certificates and select All Tasks → Request New Certificate from the shortcut menu.

8. Select the template you created from the list and open the certificate’s properties. 

9. Configure the necessary parameters, then go to Private Key → Key options and select the Make private key exportable checkbox.

10. Click Enroll.

11. Right-click the new certificate and select All Tasks → Export. 

12. Select Yes, export the private key and click Next.

13. Select Personal Information Exchange - PKCS #12 (.PFX) and select the Include all certificates in the certification path if possible checkbox. Click Next. 

14. Open the Administration Server properties and go to the Web server section.
15. Select Specify another certificate and click Change.

16. Select PKCS #12 container, specify the path to the certificate file and click OK.

17. Click OK to save the changes.

The certificate will be generated and installed.