/
How to Get a Certificate from an internal CA
How to Get a Certificate from an internal CA
All of the steps are completed on the web server. None of them are performed on the machine that is the certificate authority.
Create Certificate - Windows Server 2016+ and Windows 10
Start -> Manage computer certificates
Right-click Personal → All Tasks → Request New Certificate...
Next
Next
Under "Active Directory Enrollment Policy" check "Computer"
Click the arrow next to "Details"
Click Properties
General tab
Friendly name: ex: myserver.mydomain.local
Subject tab
Subject name:
Type: Common Name
Value: FQDN of server, ex: myserver.foray.local
Add
Alternative name:
Type: DNS
Value: FQDN of server, ex: myserver.foray.local
Add
Private Key tab
Click “Key options” arrow
Key size: 2048
Check "Make private key exportable"
OK
Enroll