How to create a Multi-Domain/SAN CSR on a Windows Server

Modified on: Fri, 13 Sep, 2024 at 10:59 AM

Open MMC on the target Windows Server
1. Hit Win + R to open the Run utility
2. Type mmc in the box
3. Press Ok.
Add Certificate Snap-in
1. Go to File > Add/Remove Snap-in
Select Certificates and press Add
Select the User or Computer Certificate snap-in
1. Select the snap-in which you want to create the certificate. For demonstration we are choosing Compute account.
2. Click Next.
Select Local Computer
1. Select local computer as you are going to create CSR on the same computer
2. Click Finish.
Select Certificate (Local Computer) and click Ok
Create Custom Request
1. Access your MMC snap in > right click the Personal folder.
2. Select All Tasks > Advanced Operations > Create Custom Request.
CSR generation wizard
1. The CSR generation wizard will open > Click Next
Proceed without enrollment policy
1. Select the option to Proceed without enrollment policy > Click Next
Click Next at the PKCS # 10 window.
Edit Properties
1. From the Details drop-down menu > Click Properties.
From here you will need to know what properties to modify that will be unique to this certificate. Please modify all applicable fields in the following sections. If you are replacing an existing certificate, you can gather all those properties from the existing certificate for the above request. If you are creating a new certificate for the first time, please consult with your IT team.
1. Genral
2. Subject
3. Extensions
4. Private Key
Once you have populated all desired fields you can proceed to save your CSR.
1. Save the CSR file to a location.
2. Select Base 64 and Click Next > Click Browse.
Select a location to save the CSR file. Enter a name for the file and click Save.

How to create a Multi-Domain/SAN CSR on a Windows Server

Articles in this folder

You may like to read