3.4.1. How to create certificates at customer
3.4.1.3. Request certificate manually (without template)
Prev  Next
3.4.1.3. Request certificate manually (without template)

The manual certificate request can also be performed without template.

[Note]Note

If the customer has provided a template for a webserver cert, the variant with the template should be used; if not, you have to go through the complete manual request generation what is described in the following.

  1. Call certlm:

    1. Via Windows Start menu -> Manage computer certificates

    2. Via PARTadmin -> category Application Server -> AppServer Service -> tabbed page Port configuration -> SSL -> certlm.msc

    Manage computer certificates

    Manage computer certificates

    certlm.msc

    certlm.msc

  2. In certlm [Certificates - Local Computer], under Personal -> Certificates, under All Tasks -> Advanced Operations, click on Create Custom Request....

    Create Custom Request...

    Create Custom Request...

    -> The dialog Certificate Enrollment -> Before You Begin is opened.

  3. Click Next.

    Before You Begin

    Before You Begin

  4. Select the option Custom request (if available) and click on Next.

    Select Certificate Enrollment Policy

    Select Certificate Enrollment Policy

  5. In the list field under Template, select "(No template) CNG key".

    Under Request format, select the option PKCS #10.

    Custom request

    Custom request

  6. Click Next.

    -> The dialog Certificate Enrollment -> Certificate information is opened.

  7. Click on the button Properties.

    Certificate Information

    Certificate Information

    -> The dialog Certificate Properties is opened.

  8. Enter appropriate information as under Section 3.4.1.2, “Request certificate manually (with template)”.

  9. Exit the dialog Certificate Properties by clicking OK.

    -> The dialog Certificate Enrollment -> Certificate information is displayed again.

    Certificate Information

    Certificate Information

  10. Click Next.

    -> The dialog Where do you want to save the offline request? is displayed.

    Determine the File Name of the certificate request to be generated and click Finish.

    Where do you want to save the offline request?

    Where do you want to save the offline request?

  11. Now send the file servercert.req to the administration, in order for this to be signed it by the company's CA.

    You will get back a signed certificate as *.crt file.

  12. Import the certificate into the local store under Personal > Certificates (as Admin).

    For this, select the certificate, open the context menu and click on Install Certificate or in certlm, under Personal > Certificates, click on the context menu command All Tasks > Import....

    Install Certificate

    Install Certificate

    Import...

    Import...

    After the import of the certificate the dialog Certificate information should show "You have a private key that corresponds to this certificate".

    Certificate Information

    Certificate Information

Then things will work automatically.

Prev Up Next
3.4.1.2. Request certificate manually (with template) Home 3.4.2. Create a self-signed certificate