Obtain a Digital Certificate from an Online Certificate Authority (CA)

How do I obtain a Digital Certificate from my Certificate Authority (CA)?
This article will describe the 2 most popular methods for obtaining a Digital Certificate from your online Certificate Authority (or CA). I will not elaborate on the reasons for doing so, and if you feel uncomfortable about these issues I suggest you take a look at the related articles at the bottom of this page.

As stated above, there are 2 easy methods for obtaining a Digital Certificate from your online CA.
Digital Certificates can be granted to users based upon their roles and group membership. For example, a regular user that wants to enroll for a certificate will only be allowed to enroll for a specific set of Digital Certificates, while another user that is a member of the Domain Admins group will be allowed to enroll for a different set of certificates that can be used for a variety of functions, including Recovery Agents, IPSec, SSL and so on.
User Digital Certificates are valid for different purposes, including:

  • Allowing data on disk to be encrypted
  • Protecting e-mail messages
  • Proving the user’s identity to a remote computer

Method #1 – By using a custom MMC

In this method a user will need to open a custom MMC and enroll by use of the MMC GUI.
In order to obtain a Digital Certificate by use of a custom MMC please perform the following steps:

  1. Go to the Start menu > Run > type MMC and press Enter.
  2. In the MMC window, go to the File menu and select Add/Remove Snap-In.
  3. In the Add/Remove Snap-In window press the Add button.
  4. Select Certificates from the available list of snap-ins and click Add.
  5. In the user attempting this action is a member of the Domain Admins or Administrative groups he or she will be presented with a Certificates Snap-In window, asking whether the certificate will be issued to the user account, the computer or a service running on the computer. We will choose My User Account. Click Finish.
  6. Expand Certificates – Current User > Personal.

Note: There may be a Certificate folder under the Personal folder. Ignore it for now.

  1. Right-click the Personal folder and select All Tasks > Request New Certificate.

req cert mmc small

  1. In the Certificate Request wizard click Next.

req cert mmc1 small

  1. In the Certificates Type select User.

Note: Depending on the groups your user account belongs to, you might also see other certificate types. Ignore them for now.
req cert mmc2 small

  1. In the Friendly name type a name for the certificate, for example “Daniel’s User Certificate” or similar.

Lamer note: Use your own name… duh…
req cert mmc3 small
Click Next.

  1. In the final page of the wizard click Finish. If all went well (and there is no reason why it won’t) you’ll get a confirmation message. Acknowledge it.

req cert mmc4 small req cert mmc5 small
You now have a new Digital Certificate. You can view it by going to the Certificates – Current User > Personal > Certificates folder within the current MMC window. Double-click on the new certificate and inspect the information found in it.
req cert mmc6 small

Method #2 – By using a web browser

In this method a user will need to open his or her web browser and surf to a given URL – that in fact is the URL for the online CA.
In order to obtain a Digital Certificate by use of a a web browser please perform the following steps:

  1. Open an Internet browser such as Internet Explorer, Opera or Firefox.
  2. In the address bar type the following URL:

http://server_name/certsrv
where server_name is the FQDN or the IP of the server that is hosting the CA.

  1. In the Welcome screen click “Request a certificate”.

req cert ie small

  1. In the “Request a certificate” screen click “User Certificate”.

req cert ie1 small

  1. In the “User Certificate – Identifying Information” window, if a warning message appears telling you that there is a Potential Scripting Violation click Yes.

req cert ie2 small req cert ie3 small
Click Submit.
req cert ie4 small

  1. In the “Certificate Issued” window click on “Install this certificate”.

req cert ie5 small req cert ie6 small

  1. When the “Certificate Installed” window screen close the browser window.

You now have a new Digital Certificate. You can view it by going to the Tools > Internet Options > Content tab within the current Internet Explorer window. Click on the Certificates button. Look for the new certificate in the Personal tab, double-click on it and inspect the information found within.
req cert ie7 small req cert ie8 small
You can also choose to export your new certificate by selecting the certificate and pressing the Export button.
req cert ie9 small req cert ie10 small req cert ie11 small req cert ie12 small req cert ie13 small

Related articles

You might also want to read the following related articles: