Generate CSR for Client

1. From Microsoft Windows, click Start.

2. In the Search programs and files field, type certmgr and select Manage computer certificates.

3. Right-click the Personal folder.

4. Select All Tasks > Advanced Operations > Create Custom Request.

Creating CSR for Client

5. The Certificate Enrollment wizard will open > click Next.

Certificate Enrollment Window

6. Select the option to Proceed without enrollment policy > click Next.

Selecting Certificate Enrollment Policy

7. Click Next at the Custom Request window.

Custom Request window

8. From the Details drop down menu click Properties.

Certificate Information window

9. Enter a Friendly Name of your choice.

Certificate Properties window

10. Access the Subject tab > in the Subject name: Type: field add the following distinguish name values:

Example:

• CN = <Username>: The technical user in the CMS group of the AD.

• O = <Organization>: The registered organizational name the certificate belongs to.

• C = <Country/region>: The two letter ISO country code.

• DC = <Domain>: This is the domain name which has been assigned by the CMS Administrator and which is used in this system. Example: DC=demopkilocal.

Certificate Properties Window

11. Click on Extensions.

    1. Add below Key usage extensions.

Certificate Properties window

b. From Extended Key usage select Server Authentication and Client Authentication.

Certificate Properties window

c. Enable Basic constraints and set path length value as 0.

Certificate Properties window

12. Click the Private Key tab > click the drop down for Key options > select Key size: 2048 and check the option to Make private key exportable > Click OK.

Certificate Properties window

13. Click Next > Click Browse.

Saving Offline Request

14. Select a location to save the CSR file. Enter a name for the file and click Save.

Save As window

15. Click Finish.

Finish CSR generation

16. The CSR file will be saved at the selected location.