Request a certificate from a Windows Server 2003 CA using a PKCS #10 or PKCS #7 file
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2
To request a certificate from a Windows Server 2003 CA using a PKCS #10 or PKCS #7 file
Open Internet Explorer.
In Internet Explorer, connect to https://servername/certsrv, where servername is the name of the Web server running Windows Server 2003 where the certification authority (CA) you want to access is located.
Click Request a certificate and then click advanced certificate request.
Click Submit a certificate request using a base-64-encoded CMC or PKCS #10 file, or submit a renewal request by using a base-64-encoded PKCS #7 file.
Do one of the following:
In Notepad, click File, click Open, select the PKCS #10 or PKCS #7 file, click Edit, click Select all, click Edit, and click Copy. On the Web page, click in the Saved request scroll box. Click Edit and then click Paste to paste the contents of certificate request into the scroll box.
Click Browse for a file to insert to locate the file you want to use for the certificate request. If you get a warning about the ActiveX control, click Yes to allow it to run, then click the Browse button. After locating and selecting the file you want to use for the certificate request, click Open. On the Web page, click Read! to paste the contents of the file into the scroll box. See the note about using Browse.
If you are connected to an enterprise CA, choose the certificate template you want to use. By default, the appropriate template is named Subordinate Certification Authority.
If you have any attributes to add to the certificate request, enter them into Additional Attributes.
Click Submit.
Do one of the following:
If you see the Certificate Pending Web page, see Related Topics below for the procedure to check on a pending certificate.
If you see the Certificate Issued Web page, click Download certificate chain. Choose to save the file to your hard disk, and then import the certificate into your certificate store. For the procedure to import a certificate, see Related Topics.
Notes
To open Internet Explorer, click Start, point to All programs, and then click Internet Explorer.
To open Notepad, click Start, point to All programs, point to Accessories, and then click Notepad.
In general, you use a PKCS #10 file to submit a request for a new certificate and a PKCS #7 file to submit a request to renew an existing certificate. Submitting requests with files is useful when the certificate requester is unable to submit a request online to the certification authority.
You might need to make https://servername a trusted site for Internet Explorer in order to browse for a file on the computer's disk drive. To make https://servername a trusted site, in Internet Explorer, click Tools, then point to Internet Options, point to Security, point to Trusted Sites, and click Sites. Type https://servername, and click OK.
If you submit the request and immediately get a message asking you if you want to submit the request even though it does not contain a BEGIN or END tag, click OK.
For the procedure to export a certificate to create a PKCS #7 file, see Related Topics.
Information about functional differences
- Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.
See Also
Concepts
Using Windows Server 2003 Certificate Services Web pages
Save a certificate request to a Windows Server 2003 CA in a PKCS #10 file
Export a certificate
Import a certificate
Importing and exporting certificates
Use Windows 2000 Certificate Services Web Pages