Request a Certificate

§

You can use the Certificates snap-in to request certificates. You can request any type of certificate that has been preconfigured and made available by an administrator of the certification authority (CA) that will process the certificate request.

Users or local Administrators is the minimum group membership required to complete this procedure. Review the details in "Additional considerations" in this topic.

â˜ž

To request a certificate

Open the Certificates snap-in for a user or computer.
In the console tree, click CertificatesÂ - Current User or Certificates (Local Computer). Select the Personal certificate store.
On the Action menu, point to All Tasks, and then click Request New Certificate to start the Certificate Enrollment wizard. Click Next.
Select the types of certificates that you want to request.
You can click Details to review additional information about each certificate.

If a caution symbol appears below the certificate, you might need to provide additional information before requesting that type of certificate. Click the More information is required to enroll for this certificate. Click here to configure message and provide the requested information, such as a subject name or the location of a valid signing certificate.
To finish, click Enroll.

Additional considerations

User certificates can be managed by the user or by an administrator. Certificates issued to a computer or service can only be managed by an administrator or user who has been given the appropriate permissions.
To open the Certificates snap-in, see Add the Certificates Snap-in to an MMC.
You can use this procedure to request certificates from an enterprise CA only. To request certificates from a stand-alone CA, you need to request certificates by using Web pages. The Web page for a Windows-based CA is located at http://servername/certsrv, where servername is the name of the server hosting the CA.
If the requested certificate type requires approval before it is issued, you need to retrieve the completed certificate via Web pages.
In order to request a Digital Signature Standard (DSS) certificate from an enterprise CA, you must select the User Signature Only certificate template in the Certificate Request Wizard.

Additional references

â‡’â‡’Certificate Manager "certmgr.msc" Manual

✍: Microsoft

2016-08-06, ∼2622🔥, 0💬

💬 2018-02-08 FYIcenter.com: @AbdulMalik, which certificate is not working?

💬 2018-02-04 AbdulMalik: my laptop certicate not work

Subject Names
The holder of the private key associated with a certificate is known as the subject. This can be a user, a program, or virtually any object, computer, or service. Because the subject name can vary greatly depending on who or what the subject is, some flexibility is needed when providing the subject ... 2016-08-06, ∼4817🔥, 0💬

Manage Certificates
Certificates are typically issued to a particular computer, user, or service, for specific purposes, for specific durations, and often for specific recipients. As a result, at times you might need to obtain additional certificates, renew existing certificates, examine or modify the properties of a c... 2016-08-10, ∼4775🔥, 0💬

Create a Custom Certificate Request
Administrators usually configure certificate templates in advance so that the templates can be used to request or enroll for certificates. Custom requests can be used to modify a certificate template to meet special requirements, or to create a new certificate not based on a template. They can also ... 2016-08-01, ∼3492🔥, 0💬

Request Certificates by Using the Certificate Request Wizard
When you request certificates from a Windows-based enterprise certification authority (CA), you can use the Certificate Request Wizard located in the Certificates snap-in. This wizard guides you through the following steps: Selecting the CA to which you will submit the request. Selecting the appropr... 2016-08-06, ∼3033🔥, 0💬

Obtain a Certificate
To enroll for a certificate, a certificate request must be made by the user, computer, or service that has access to the private key associated with the public key that will be part of the certificate. Users, computers, and services can autoenroll for certificates without user intervention, dependin... 2016-08-10, ∼2932🔥, 0💬

Request a Certificate
You can use the Certificates snap-in to request certificates. You can request any type of certificate that has been preconfigured and made available by an administrator of the certification authority (CA) that will process the certificate request. Users or local Administrators is the minimum group m... 2016-08-06, ∼2623🔥, 0💬

Cryptographic Service Providers
A cryptographic service provider (CSP) is the program that performs authentication, encoding, and encryption services that Windows-based applications access through the Microsoft Cryptography application programming interface (CryptoAPI). Each CSP provides a different implementation of the CryptoAPI... 2016-08-06, ∼2544🔥, 0💬

Autoenroll for a Certificate from the Certificates Snap-in
Many organizations will use Group Policy to automatically enroll users, computers, or services for certificates. With automatic enrollment, a user might see a reminder with a prompt to complete the enrollment. However, there might also be times when a user or administrator wants to verify that all p... 2016-08-10, ∼2274🔥, 0💬

Save a Certificate Request in a File
You can prepare a certificate request for use later, or to retain a copy of the request even if it is processed at the same time as it is saved. Users or local Administrators is the minimum group membership required to complete this procedure. Review the details in "Additional considerations" in thi... 2016-08-01, ∼2232🔥, 0💬

All rights in the contents of this web site are reserved by the individual author. fyicenter.com does not guarantee the truthfulness, accuracy, or reliability of any contents.