Steps to get certificate from Internal CA server

Steps to get certificate from Internal CA server

1. Create a text file and save the format of the file as “.inf”. For instance “policy.inf”.
   a. We need to submit the inf file in order to generate the CSR through “Certreq” command.

2. The content of the policy file should be in specific format. Attached here the sample policy file for reference.
   a.

3. Once the policy file is created, open command prompt as admin and type the below command:
   a. Certreq –new

b. For instance,
c. Certreq –new policy.inf request.req

1. A CSR file will be generated.

2. Use the following command to submit the CSR to an internal CA to get the certificate:

a. certreq -submit -attrib "CertificateTemplate:"

b. For instance,
c. certreq -submit -attrib "CertificateTemplate:WebServerSSL" request.req certificate.cer

1. It will prompt you to select the CA server. Once the CA server is selected, a new certificate will be generated.