November 7, 2011

Import an OpenSSL CSR into Windows CA server

To import a Certificate Signing Request (CSR) into a Windows Certificate Authority Server, you must define a certificate template.  OpenSSL does not do this because this is a Microsoft only concept.  With the use of the Windows ‘certreq’ command, you can apply a template type during the request import process.  This command should be available on your Microsoft CA server.

C:\>certreq -submit -attrib "CertificateTemplate:WebServer" request.csr

An alternative method for importing CSR’s to Microsoft CA can be found here.