Method 2: Your organization does not have web enrollment enabled

Technical Articles
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

You can request a certificate using a Windows PC.

  1. Open Command Prompt.
  2. Execute the following command:
    certreq -submit -attrib "CertificateTemplate:<SIGNINGTemplate name>"
  3. When prompted, provide the CSR file, the CA to issue from, and an output location of the client.cer file.
  4. You will need the CA certificate to build the chain. Your certificate administrator should be able to provide the CA certificate. Otherwise, you can execute the following command:
    certutil -ca.cert output/path/root_ca.cer
  5. Copy the root_ca.cer and the client.cer files back to the location where the CSR was created.
  6. Execute the following command:
    openssl pkcs12 -export -out /path/to/<choosename>.p12 -inkey /path/to/private.key -in /path/to/client.cer -certfile /path/to/root_ca.cer
  7. When prompted, enter an export password.