Entrust Datacard

Entrust Certificate Services Support Knowledge Base

Last Modified: 2016-06-29 10:24:59.0

CSR Generation and Installation using Certreq command (Windows)

Article Number: 46446


CSR Generation and Installation using Certreq command (Windows)


Generate CSR:  
1. Open the notepad and copy and paste the configuration lines below and replace some parameters below
   accordance with your own company information. Such as: CN etc.

   Save the following file as request.inf on your server editing the subject according to the comment:

;----------------- request.inf -----------------

Signature="$Windows NT$"

;Change to your,country code, company name and common name
Subject = "C=US, O=Example Co, CN=something.example.com"

KeySpec = 1
KeyLength = 2048
Exportable = TRUE
MachineKeySet = TRUE
SMIME = False
PrivateKeyArchive = FALSE
UserProtected = FALSE
UseExistingKeySet = FALSE
ProviderName = "Microsoft RSA SChannel Cryptographic Provider"
ProviderType = 12
RequestType = PKCS10
KeyUsage = 0xa0

OID= ; this is for Server Authentication / Token Signing

2. Open command prompt and make sure you have the full admin rights on the server to do this step:

C:\>certreq -new request.inf request.csr

3. Open the request.csr using notepad and copy the contents to your order screen or on your CMS portal.

Installing Certificate:


When your certificate is issued you'll typically receive a file called entrustcert.crt, Save it on the server and from the same directory run:

         C:\>certreq -accept store_acmesafe_com.cer

This will install the cert in the Windows certificate store and it will be available in IIS , MMC , Exchange , LDAP/Active Directory , Terminal Services and those products that make use of the Windows certificate store.

For more information, please visit: http://support.microsoft.com/kb/321051

If you have any questions or issues please feel free to contact Entrust Support: https://www.entrust.net/customer_support/contact.cfm