Skip to content

Generating a CSR on Windows

Use the Microsoft Management Console (MMC) certificate snap-in to generate a Certificate Signing Request (CSR) on Windows.

Prerequisites

  • Access to Microsoft Windows.
  • Permission to open MMC and manage certificates.

Generating the CSR

  1. Click Start.
  2. Search for mmc.
  3. Open File > Add/Remove Snap-in.
  4. Select Certificates.
  5. Click Add.
  6. Select Computer account.
  7. Click Next.
  8. Select Local computer.
  9. Click Finish.
  10. Click OK in the Add/Remove Snap-in window.
  11. Save the console settings for future use.
  12. In the MMC snap-in, right-click Personal.
  13. Select All Tasks > Advanced Operations > Create Custom Request.
  14. In the CSR generation wizard, click Next.
  15. Select Proceed without enrollment policy.
  16. Click Next.
  17. At the PKCS #10 window, click Next.
  18. Open Details.
  19. Click Properties.
  20. Enter a friendly name.
  21. Open the Subject tab.
  22. Add the required distinguished name values.
Field Meaning Example
CN Common Name that the certificate secures. *.OrganizationName.sa
O Registered organization name. Saudi Information Technology Company
S State or province. Do not abbreviate. Riyadh
L Locality or city. Riyadh
C Two-letter ISO country code. SA
  1. Open the Private Key tab.
  2. Open Key options.
  3. Select key size 2048.
  4. Select Make private key exportable.
  5. Click OK.
  6. Select hash algorithm sha256.
  7. Click OK.
  8. Click Next.
  9. Click Browse.
  10. Select where to save the CSR file.
  11. Enter a file name.
  12. Click Save.
  13. Click Finish.

Next Steps

Use the generated CSR file to request a Code Signing or Client (S/MIME) certificate.