Hi all, Question, I have to create a csr of a server where iis can not be installed. So, what possibilities do I have? If i'm using OpenSSL i can use the following procedure: Generate a private key file Generate a Certificate Signing Request (CSR) to send to VeriSign or something else... Paste the CSR where VeriSign asks for it Download the .crt file (zipped) from VeriSign and generate the .pfx file ... So is this possible with certutil/certreq or another tool and what are the parameters? Thanks for answer, Uerueluem

You can use certreq.exe utility. At first you need to create certificate request configuration file (*.INF) with the syntax like this: [NewRequest] Subject="CN=" KeyLength=2048 KeySpec=1 KeyUsage=0xf0 MachineKeySet=TRUE [RequestAttributes] CertificateTemplate="TemplateCommonName" And run the certreq: CertReq –New –f path\RequestConfigFile.inf path\OutputRequestFileName.reqMy weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com