To request an identify certificate from a Microsoft Certificate server using a PKCS#12 certificate signing request (CRS), follow these steps:
SUMMARY STEPS
1.
From the Microsoft Certificate Services web interface, click Request a certificate and click Next.
![](/c/dam/en/us/td/i/100001-200000/140001-150000/144001-145000/144765.tif/_jcr_content/renditions/144765.jpg)
2.
Click Advanced request and click Next.
![](/c/dam/en/us/td/i/100001-200000/140001-150000/144001-145000/144766.tif/_jcr_content/renditions/144766.jpg)
3.
Click Submit a certificate request using a base64 encoded PKCS#10 file or a renewal request using a base64 encoded PKCS#7 file and click Next.
![](/c/dam/en/us/td/i/100001-200000/140001-150000/144001-145000/144767.tif/_jcr_content/renditions/144767.jpg)
4.
In the Saved Request text box, paste the base64 PKCS#10 certificate request and click Next. The certificate request is copied from the Cisco NX-OS device console.
![](/c/dam/en/us/td/i/100001-200000/140001-150000/144001-145000/144768.tif/_jcr_content/renditions/144768.jpg)
5.
Wait one or two days until the certificate is issued by the CA administrator.
![](/c/dam/en/us/td/i/100001-200000/140001-150000/144001-145000/144769.tif/_jcr_content/renditions/144769.jpg)
6.
Note that the CA administrator approves the certificate request.
![](/c/dam/en/us/td/i/100001-200000/140001-150000/144001-145000/144770.tif/_jcr_content/renditions/144770.jpg)
7.
From the Microsoft Certificate Services web interface, click Check on a pending certificate and click Next.
![](/c/dam/en/us/td/i/100001-200000/140001-150000/144001-145000/144771.tif/_jcr_content/renditions/144771.jpg)
8.
Choose the certificate request that you want to check and click Next.
![](/c/dam/en/us/td/i/100001-200000/140001-150000/144001-145000/144772.tif/_jcr_content/renditions/144772.jpg)
9.
Click Base 64 encoded and click Download CA certificate.
![](/c/dam/en/us/td/i/100001-200000/140001-150000/144001-145000/144773.tif/_jcr_content/renditions/144773.jpg)
10.
In the File Download dialog box, click Open.
![](/c/dam/en/us/td/i/100001-200000/140001-150000/144001-145000/144774.tif/_jcr_content/renditions/144774.jpg)
11.
In the Certificate box, click Details tab and click Copy to File.... In the Certificate Export Dialog box, click Base-64 encoded X.509 (.CER), and click Next.
![](/c/dam/en/us/td/i/100001-200000/140001-150000/144001-145000/144775.tif/_jcr_content/renditions/144775.jpg)
12.
In the File name: text box on the Certificate Export Wizard dialog box, enter the destination file name and click Next.
![](/c/dam/en/us/td/i/100001-200000/140001-150000/144001-145000/144776.tif/_jcr_content/renditions/144776.jpg)
13.
Click Finish.
![](/c/dam/en/us/td/i/100001-200000/140001-150000/144001-145000/144777.tif/_jcr_content/renditions/144777.jpg)
14.
Enter the Microsoft Windows type command to display the identity certificate in base64-encoded format.
![](/c/dam/en/us/td/i/100001-200000/140001-150000/144001-145000/144778.tif/_jcr_content/renditions/144778.jpg)
DETAILED STEPS
Step 1 |
From the Microsoft Certificate Services web interface, click Request a certificate and click Next.
|
Step 2 |
Click Advanced request and click Next.
|
Step 3 |
Click Submit a certificate request using a base64 encoded PKCS#10 file or a renewal request using a base64 encoded PKCS#7 file and click Next.
|
Step 4 |
In the Saved Request text box, paste the base64 PKCS#10 certificate request and click Next. The certificate request is copied from the Cisco NX-OS device console.
|
Step 5 |
Wait one or two days until the certificate is issued by the CA administrator.
|
Step 6 |
Note that the CA administrator approves the certificate request.
|
Step 7 |
From the Microsoft Certificate Services web interface, click Check on a pending certificate and click Next.
![](/c/dam/en/us/td/i/100001-200000/140001-150000/144001-145000/144771.tif/_jcr_content/renditions/144771.jpg) |
Step 8 |
Choose the certificate request that you want to check and click Next.
|
Step 9 |
Click Base 64 encoded and click Download CA certificate.
|
Step 10 |
In the File Download dialog box, click Open.
|
Step 11 |
In the Certificate box, click Details tab and click Copy to File.... In the Certificate Export Dialog box, click Base-64 encoded X.509 (.CER), and click Next.
|
Step 12 |
In the File name: text box on the Certificate Export Wizard dialog box, enter the destination file name and click Next.
![](/c/dam/en/us/td/i/100001-200000/140001-150000/144001-145000/144776.tif/_jcr_content/renditions/144776.jpg) |
Step 13 |
Click Finish.
![](/c/dam/en/us/td/i/100001-200000/140001-150000/144001-145000/144777.tif/_jcr_content/renditions/144777.jpg) |
Step 14 |
Enter the Microsoft Windows type command to display the identity certificate in base64-encoded format.
|