Breadcrumbs

Generate CSR by GUI Tool

  1. Open Run and use certlm.msc command

image-20250825-125407.png

Local Computer - Certificates

  1. Right click on Personal → All Tasks → Advanced Operations → Create custom requests

image-20250825-125654.png

Create Custom Request

  1. Click Next button on Before you begin wizard screen

  2. Click Next on Select Certificate Enrollment Policy wizard

  3. On Custom Request wizard, use Template → (No Template) CNG Key and Request format PKCS #10, and click Next

image-20250825-125908.png

Certificate Enrollment - Custom request

  1. Select Details and click on Properties button

image-20250825-130142.png

Certificate Information


  1. On Certificate Properties, Assign Friendly name and Description

image-20250825-130533.png

Certificate Properties - Friendly Name and Description

  1. On Subject tab, select Subject Name Type and enter information for Full DN, Common Name, Country, Email, Given Name, Locality, Organization, Organization Unit, State etc.,

image-20250825-130635.png

Certificate Properties – Subject

  1. On Private Key Tab, Click on Cryptographic Service Provider and unselect the RSA, Microsoft Software Key Storage Provider and Select RSA, Utimaco CryptoServer Key Storage Provider

  2. On select Hash Algorithm, select sha256

If RSA, Utimaco CryptoServer is not available by default, enable Show all CSPs checkbox

image-20250825-131353.png

Certificate Properties - Private Key

  1. Click Apply and OK

  2. Check on HSM using below command that Certificate/Key is generated

> cngtool ListKeys


image-20250825-132445.png

Key Listing