Generate a certificate signing request from a certreq policy file

3min

This section explains how to generate a Certificate Signing Request (CSR) from a certreq policy file on the computer where you plan to install Microsoft SQL Server. A public/private key pair is created in your Windows account profile when you generate the CSR file.  In the next section, use the KMES to issue a signed certificate from the CSR, which you later associate with the public/private key pair stored in the Windows certificate store.
Create a certreq policy file
1
On the computer where you plan to install Microsoft SQL Server, open a text editor.
2
Create a new file, then copy and paste in the following:
Text
[Version]
Signature = "$WindowsNT$"

[NewRequest]
Subject = "CN=SqlServer"
Exportable = TRUE
KeyLength = 2048
[Version]
Signature = "$WindowsNT$"

[NewRequest]
Subject = "CN=SqlServer"
Exportable = TRUE
KeyLength = 2048
﻿
3
Save the file with the .inf extension (for example, certreq_policy.inf).
Generate a CSR from the certreq policy file
1
Open either the command prompt or PowerShell.
2
Go to the directory where you saved the certreq policy .inf file.
3
Run the following command to generate a certificate signing request (CSR) from the certreq policy .inf file:
PowerShell
certreq -new -q -config “your.domain.com\Microsoft SQL Server" certreq_policy.inf SqlServer.csr
certreq -new -q -config “your.domain.com\Microsoft SQL Server" certreq_policy.inf SqlServer.csr
﻿
4
Copy the CSR file to the storage medium configured on your KMES Series 3 device.
﻿
﻿
﻿
﻿

Before you start

Configure KMES Series 3

Generate a certificate signing request from a certreq policy file

Create a certreq policy file

Generate a CSR from the certreq policy file

﻿