Windows Certificates
Obtaining Computer Certificates in the Windows Certificate Store
| To obtain a computer certificate, the host machine needs to be joined to an AD domain and the domain user needs to be logged-in with administrator privileges. |
Execute the following steps to obtain a new certificate in the Windows Certificate Store:
1 Press WIN+R, enter 'certlm.msc' and press Enter to start the certificate management for the local computer.
2
In the tree panel on the left hand side, right-click on the 'Personal' folder.
3 From the context menu select .
4 On the next screen click Next.
5 On the Select Certificate Enrollment Policy page, select the Active Directory Enrolment Policy option in the 'Configured by your administrator' section. Then click Next.
6 On the Request Certificates page, select the checkbox for 'Computer' and expand the 'Details' drop-down list.
7 Open the Properties
8 Navigate to the Private Key tab.
9 Expand the Key options.
10 Make sure that the Key size is at least 2048 bit.
11 Select the checkbox for the Make private key exportable option.
12 Then click OK to close the Properties.
13 Click Enroll to launch the installation of the new certificate.
14 Click Finish to finish the Certificate Enrollment.
15 Expand the Personal folder in the tree panel and select the Certificates sub-folder. The newly created certificate should be visible in the main panel.
The Certificate Subject Name
For various configuration steps certificate’s Subject Names are needed. This is the Fully Qualified Domain Name (FQDN) of the respective host machine.
The Subject Name can also be found in the certificate itself, following these steps:
1 Press WIN+R, enter 'certlm.msc' and press Enter to start the certificate management for the local computer.
2 In the tree panel on the left hand side, navigate to 'Personal > Certificates'.
3 In the main panel, double-click the certificate.
4 Go to the Details tab and select the Subject Field.