Prerequisites

• The requested certificate requires values that are not supported by InCommon such as:
  • Lifetimes exceeding 398 days
  • EKUs other than Digital Signature and Key Encipherment 
  • Subject Alternate Names that are not in an approved DNS domain
  • Subject Alternate Names that are not DNS addresses such as an IP Address name

Submit the certificate request to an Austin CAs

1. Sign in to a computer joined to the Austin Active Directory where the system has permissions to enroll for a certificate from the requested template

2. Start an administrative PowerShell session as a local administrator 

   Complete any remaining instructions in this PowerShell session unless directed otherwise

   
   

3. Run the following commands to define the certificate request file:

   $path_cer = Read-Host -Prompt "Provide the path to the certificate file" $name_cer = Read-Host -Prompt "Provide the name of the certificate file" $cert_file_req = C:\Content\certificate\custom.req

   
   

4. Run the following commands to retrieve the certificate to be imported: 

5. Run one of the following commands to set the certificate template:

   • For VMware SSL certificates, run the following: 

     $cert_template = "VMwareSSL6.5"

     
     

   • For long-duration server certificates, run the following: 

     $cert_template = "Server-10Year"

     
     

6. Run the following commands to define where the signed certificate file will be created using the certificate request file

   $cert_file_cer = (Get-Item $cert_file_req).DirectoryName + "\" + (Get-Item $cert_file_req).BaseName + ".cer"

   
   

7. Run the following commands to submit the request to an Austin certificate authority:

   certreq -submit -attrib ("CertificateTemplate:" + $cert_template) $cert_file_req $cert_file_cer