Licensing 11.17.2 build 37000
How to obtain the .pfx file using a domain certificate ‑ Method 1
Log on to a server in the domain, open the MMC, and follow these steps:
1. Create a directory c:\ls_cert to hold the exported .pfx file.
2. Add the Certificate snap‑in by selecting File > Add/Remove Snap‑in > Certificates > Computer
account > Local computer.
3. In the le pane under Certificates, right‑click Personal and choose All Tasks > Request New
Certificate, and then Next.
4. In the Certificate Enrollment Policy wizard, choose Active Directory Enrollment Policy, and
then Next. Select the check box next to Computer, and select Details to the right.
5. Select Properties and on the General tab, type a friendly name and description.
6. On the Subject tab, under Subject Type, choose Common name from the Type menu. Type a
friendly name in the text box, choose Add, and then Apply.
7. On the Extensions tab, choose Key usage from the menu. Add Digital signature and Key en‑
cipherment to the Selected options box.
8. On the Extended Key Usage menu, add Server Authentication and Client Authentication to
the Selected options box.
9. On the Private Key tab and under the Key options menu, ensure that the Key size is 4096. Select
the Key Exportable check box, and then Apply.
10. On the Certification Authority tab, ensure that the CA check box is selected, and then OK >
Enroll > Finish.
11. In the Certificates console, select Personal > Certificates, choose the certificate you built. Se‑
lect All Tasks > Export > Next, and select the Yes, Export the Private Key radio button, and
then Next.
12. Under Personal Information Exchange ‑ PKCS #12(.PFX), select the check box to include all
certificates, choose Next, create a password, and choose Next.
13. Click Browse, navigate to C:\ls_cert and type server.PFX, and then follow the wizard to
finish.
How to obtain the .pfx file sending a request to a certificate authority (CA) –Method 2
These steps might vary based on your Certificate Authority.
1. Log on to the License Server, open the MMC, and follow these steps:
a) Add the Certificate snap‑in by selecting File > Add/Remove Snap‑in > Certificates > Com‑
puter account > Local computer.
b) In the le pane under Certificates, right‑click Personal and choose All Tasks > Advance
Operations > Create Custom Request, and then Next.
© 1999–2024 Cloud Soware Group, Inc. All rights reserved. 62