- Open MMC on the target Windows Server
- Hit Win + R to open the Run utility
- Type mmc in the box.
- Press Ok.
- Add Certificate Snap-in
- Go to File > Add/Remove Snap-in
- Go to File > Add/Remove Snap-in
- Select Certificates and press Add
- Select the User or Computer Certificate snap-in
- Select the snap-in which you want to create the certificate. For demonstration we are choosing Compute account.
- Click Next.
- Select Local Computer
- Select local computer as you are going to create CSR on the same computer.
- Click Finish.
- Select Certificate (Local Computer) and click Ok
- Create Custom Request
- Access your MMC snap in > right click the Personal folder.
- Select All Tasks > Advanced Operations > Create Custom Request.
- CSR generation wizard
- The CSR generation wizard will open > Click Next
- The CSR generation wizard will open > Click Next
- Proceed without enrollment policy
- Select the option to Proceed without enrollment policy > Click Next
- Select the option to Proceed without enrollment policy > Click Next
- Click Next at the PKCS # 10 window.
- Edit Properties
- From the Details drop-down menu > Click Properties.
- From the Details drop-down menu > Click Properties.
- From here you will need to know what properties to modify that will be unique to this certificate. Please modify all applicable fields in the following sections. If you are replacing an existing certificate, you can gather all those properties from the existing certificate for the above request. If you are creating a new certificate for the first time, please consult with your IT team.
- Genral
- Subject
- Extensions
- Private Key
- Once you have populated all desired fields you can proceed to save your CSR.
- Save the CSR file to a location.
- Select Base 64 and Click Next > Click Browse.
- Select a location to save the CSR file. Enter a name for the file and click Save.
How to create a Multi-Domain/SAN CSR on a Windows Server
