Solved

How can i create an PKCS#10 file on a windows server 2008

Posted on 2015-02-03
4
1,210 Views
Last Modified: 2015-02-05
Hi,

How can i create an PKCS#10 file on a windows 2008 server, which doesn't have any role.
So there is no webserver install on it.

Is there also a tool for it?

Regards
0
Comment
Question by:xof64
  • 2
4 Comments
 
LVL 36

Accepted Solution

by:
Mahesh earned 250 total points
ID: 40588332
U can create PKCS#10 request either through Certificate MMC console for local user \ computer, this do not require any role installed on server \ computer and it Is easiest
Step by step
https://technet.microsoft.com/en-us/library/cc730929.aspx
https://kb.meraki.com/knowledge_base/creating-an-offline-certificate-request-in-windows-server


OR you can request certificate from online certificate authority web site
EX:
Http://certserver/certsrv
This is windows certificate authority web url from where you can make PKCS#10 cert request
https://technet.microsoft.com/en-us/library/cc770607.aspx

U can also create new PKCS#10 request through built-in CertReq.exe command line utility
U can run Certreq.exe -v -? for more information

https://msdn.microsoft.com/en-us/library/windows/desktop/aa379338(v=vs.85).aspx
Sample request
0
 
LVL 63

Expert Comment

by:btan
ID: 40588350
As Mahesh shared most of the relevance. I just to add a use case for CSR like "Request a certificate for an IIS web", you can check out these steps which I did see relevant though article is old and not it is more of in house Microsoft CA. But it should applicable with e CSR given to third party CA
http://www.windowsnetworking.com/kbase/WindowsTips/Windows2000/AdminTips/IIS/RequestacertificateforanIISwebserver.html 

There are also case of using openssl too from https://www.openssl.org/docs/apps/req.html#examples
e.g. Generate a self signed root certificate: openssl req -x509 -newkey rsa:1024 -keyout key.pem -out req.pem

One useful online tool to check CSR formatting is handy as well to verify that it contains the correct information
https://www.sslshopper.com/csr-decoder.html
0
 
LVL 30

Assisted Solution

by:Rich Weissler
Rich Weissler earned 250 total points
ID: 40588724
The first part of my recent article covers how to generate a certificate request using the command line tools on Windows Servers.
0
 
LVL 63

Expert Comment

by:btan
ID: 40590107
there is even CSR generator online
e.g. OpenSSL CSR Wizard   - https://www.digicert.com/easy-csr/openssl.htm
e.g. CSR generator - https://csrgenerator.com/
e.g. another using openssl (as well) https://www.openprovider.co.uk/ssl-certificates/csr-generation-tool/
e.g. Has generator, decoder and ssl checker- https://www.gogetssl.com/online-csr-generator/
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

837 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question