Generate a CSR from a certreq policy file

this section shows how to generate a certificate signing request (csr) from a certreq policy file on the computer where you plan to install microsoft ad cs then, it describes how to create a public/private key pair in your windows account profile after you generate the csr file in a later section, the {{k}} issues a signed certificate from the csr, for you to associate with the public/private key pair stored in the windows certificate store create a policy file perform the following steps to create a certreq policy file open a text editor on the computer where you plan to install microsoft ad cs create a new file, then copy and paste the following content into that file \[version] signature = "$windows nt$" \[newrequest] subject = "cn=adcs" exportable = true keylength = 2048 machinekeyset = true save the file with the inf extension (such as certreq policy inf ) generate a csr perform the following steps to generate a csr from the certreq policy file open either the command prompt or powershell go to the directory with the certreq policy inf file run the following command to generate a certificate signing request (csr) from the certreq policy inf file certreq new q config “your domain com\microsoft adcs" certreq policy inf adcs csr copy the csr file to the storage medium configured on your {{k3}}