Request an IU web server certificate

• Prerequisite
• Request a certificate

---

Prerequisite

Configure public key policies/Certificate Services Client - Auto-enrollment settings:

• Enroll new certificates
• Renew expired certificates
• Process pending certificate requests
• Remove revoked certificate revoked requests

For more, see Configure Group Policy to Autoenroll and Deploy Certificates.

Request a certificate

1. Open the Certificates snap-in for a user or computer; see Add the Certificates Snap-in to an MMC.
2. Right-click Personal > All Tasks > Request New Certificate....
3. Under "Before You Begin", select Next.
4. Under "Select Certificate Enrollment Policy", select Next.
5. Under "Request Certificates", check IU Web Server.
   1. Select More information is required to enroll....
   2. On the Subject tab, in the "Alternative name" section, select DNS from the Type drop-down. In the "value" field, enter the fully qualified domain name of the DNS address for which you are requesting the certificate. Select Add to insert the value into the certificate request. You can add more DNS entries as needed. Once a value has been added, select OK to close the request.
      • The subject name (CN=) and alternate subject name (DNS=) follow UITS required workstation naming conventions for certificate submission; see Recommended naming conventions for IU Windows computers and groups.
   3. Select OK.
   4. Select Enroll.
6. The request will be processed within 1-2 business days.
7. Retrieve approved certificates:
   1. From Start, go to MMC > Add/Remove Snap-in > Certificates > Computer account > Local computer.
   2. Right-click Certificates - Local Computer > All Tasks > Automatically Enroll and Retrieve Certificates....
   3. Under "Before You Begin", select Next.
   4. Under "Certificate Enrollment - Review approved certificates", select Enroll or Close.
8. Issued certificates should appear in Certificates - Local Computer > Personal > Certificates.