Skip to main content

Request a Certificate from internal CA

Document Control​

  • Created: 2023-09-02
  • Last Updated: 2023-09-16

Generating a CSR​

Generate a CSR from another server, doing this from IIS is a tried and tested method.

Submitting the request to the CA​

  1. Open a web browser.
  2. Browse to your Certificate Authority website.
Certificate Authority website URL

Enter the address of your CA followed by /certsrv for example http://ca server name/certsrv in the Address bar.

  1. Click Request a Certificate.

Internal-ca-001

  1. Click submit an advanced certificate request.

Internal-ca-002

  1. Paste in the CSR.

Internal-ca-002

Certificate template

Make sure to change the template you want to use if that is applicable.

Internal-ca-002

Completing the Request​

Your certificate should be approved almost instantly and some download options will appear. Select whatever download option is best for you; I'd suggest renaming the certificate file you download, it'll have a generic name otherwise.

tip

The chain option downloads the Certificate Authority certs (Root and Sub-CAs in the chain) as well, all the way back to the root ca.