Request an IU web server certificate

• Prerequisite
• Request a certificate

---

Prerequisite

Configure public key policies/Certificate Services Client - Auto-enrollment settings:

• Enroll new certificates
• Renew expired certificates
• Process pending certificate requests
• Remove revoked certificate revoked requests

For more, see Configure Group Policy to Autoenroll and Deploy Certificates.

Request a certificate

1. Open the Certificates snap-in for a user or computer; see Add the Certificates Snap-in to an MMC.
2. Right-click Personal > All Tasks > Request New Certificate....
3. Under "Before You Begin", click Next.
4. Under "Select Certificate Enrollment Policy", click Next.
5. Under "Request Certificates", check IU Web Server.
   1. Click More information is required to enroll....
   2. On the Subject tab, in the "Alternative name" section, select DNS from the Type drop-down. In the "value" field, enter the fully qualified domain name of the DNS address for which you are requesting the certificate. Click Add to insert the value into the certificate request. You can add more DNS entries as needed. Once a value has been added, click OK to close the request.
      • The subject name (CN=) and alternate subject name (DNS=) follow UITS required workstation naming conventions for certificate submission; see Recommended naming conventions for IU Windows computers and groups.
   3. Click OK.
   4. Click Enroll.
6. The request will be processed within 1-2 business days.
7. Retrieve approved certificates:
   1. From Start, go to MMC > Add/Remove Snap-in > Certificates > Computer account > Local computer.
   2. Right-click Certificates - Local Computer > All Tasks > Automatically Enroll and Retrieve Certificates....
   3. Under "Before You Begin", click Next.
   4. Under "Certificate Enrollment - Review approved certificates", click Enroll or Close.
8. Issued certificates should appear in Certificates - Local Computer > Personal > Certificates.