Certificates - CSR - How to generate a CSR on Windows Server using Certificate Manager

Self-Help Article (External)

Purpose

This article will provide step by step instructions to generate a CSR on a Windows Server using Certificate Manager

Requirements

Step-by-Step Procedures

1. Open Certificate Manager by typing certmgr.msc in search box and then selecting certmgr.msc.

2. Right-click the Personal folder and browse to All Tasks > Advanced Operations > Create Custom Request.

3. Wizard will begin with screen Before you Begin, review and click Next.
   

4. On the Certificate Enrollment Policy screen, under Custom Request choose Proceed without enrollment policy and click Next.

   

5. On the Custom request screen, under Template select (No template) Legacy Key and under Request Format select PKCS#10 and click Next.

   

6. On the Certificate Information screen, on the Custom request line use the Details down arrow and select Properties.

   

7. On the Certificate Properties screen:

   1. Go to the Subject tab and under Subject Name select each of the following from the drop down list:

      1. Select Common Name (URL) and enter your Hostname and then click Add.

      2.  Select Organization and enter your Organization and then click Add.

      3. Select State and enter your Oklahoma and then click Add.

      4. Select Country and enter US and then click Add.

      5. Select Email and enter your email address and then click Add.

   2. Go to the Private Key tab and under Key Options set the size to 2048 and check the box Make private key as exportable and then click OK.

      

8. On the Certificate Information screen, click Next.

9. On the Certificate Enrollment screen, under File Name, browse to a save location and enter a file name, select Base 64 under File format, and click Finish.

   

10. A new folder will show up containing both a key and CSR

11. Using the CSR created in step 10 submit a new Security Certificate Request.