Generate a certificate signing request from a certreq policy file

this section explains how to generate a certificate signing request (csr) from a certreq policy file on the computer where you plan to install microsoft sql server a public/private key pair is created in your windows account profile when you generate the csr file in the next section, use the kmes to issue a signed certificate from the csr, which you later associate with the public/private key pair stored in the windows certificate store create a certreq policy file on the computer where you plan to install microsoft sql server, open a text editor create a new file, then copy and paste in the following \[version] signature = "$windowsnt$" \[newrequest] subject = "cn=sqlserver" exportable = true keylength = 2048 save the file with the inf extension (for example, certreq policy inf ) generate a csr from the certreq policy file open either the command prompt or powershell go to the directory where you saved the certreq policy inf file run the following command to generate a certificate signing request (csr) from the certreq policy inf file certreq new q config “your domain com\microsoft sql server" certreq policy inf sqlserver csr copy the csr file to the storage medium configured on your kmes series 3 device