Click the drop down for Select Hash Algorithm, under Hash Algorithm select sha256 > Click OK.Note: All Code Signing or Client (S/MIME) certificates must have a 2048 bit key size. Click the Private Key tab > click the drop down for Key options > select Key size: 2048 and check the option to Make private key exportable > Click OK.L = Locality: The business registered location/city (not the actual server location).Ĭ = Country/region: The two letter ISO country code. Do not abbreviate the state or province name, for example: California not CA. S = State: The business registered state or province. OU = Organizational Unit: The department within the organization. For example: 'XY & Z Corporation' would be 'XYZ Corporation' or 'XY and Z Corporation'. If the company or department has an &, or any other symbol using the shift key in its name, the symbol must be spelled out or omitted, in order to enroll. O = Organization: The registered organizational name the certificate belongs to. Access the Subject tab > in the Subject name: Type: field add the following distinguish name values required for your CSR ( CN, O, OU, S, L and C).ĬN = Common Name: The registered organizational name that the certificate will be issued to and secure.Enter a Friendly Name of your choosing.From the Details drop down menu > Click Properties.Select the option to Proceed without enrollment policy > Click Next.The CSR generation wizard will open > Click Next.Select All Tasks > Advanced Operations > Create Custom Request.Access your MMC snap in > right click the Personal folder.Save these console settings for future use.In the Add/Remove Snap-in window, click OK.Select Local computer (the computer this console is running on).From the list of available snap-ins, select Certificates.In the Search programs and files field, type mmc.

To generate a Certificate Signing Request (CSR) via a MMC certificate snap-in using Microsoft Windows, perform the following steps.

Mmc console