Method 1: Your organization has web enrollment enabled

Technical Articles
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

  1. Navigate to the following webpage: http://YourCAServerAddress/certsrv/
  2. Enter your username and password.
  3. On the Microsoft Active Directory Certificate Services homepage, click Request a certificate.
  4. Click advanced certificate request.
  5. Paste the CSR file content in the Saved Request field.
  6. Choose a certificate template from the Certificate Template pop-up menu.
    Note:

    You can use any certificate template that supports digital signature. Consult your certificate administrator if needed.

  7. Click Submit.
    Note:

    If your server is not configured with the auto-approve option, have the submitted certificate request manually approved before clicking View the status of a pending certificate request and continuing to step 8.

  8. Select Base 64 encoded.
  9. Click Download certificate, and then rename the certificate as user.cer.
  10. Click Download certificate chain to download the .p7b file.
  11. To extract certificates from the .p7b file, do the following:
    1. Double-click the file and enter your Keychain Access authentication.
    2. In Keychain Access, control-click the root certificate to export it as a .cer file. You can now rename and save it elsewhere. The recommended file name is ca.cer.
    3. Click Save.
  12. (Optional) If you have an intermediate or issuing CA certificate, export and rename those as well. The recommended file names are int.cer and issuer.cer, respectively.