How to issue a certificate for a device through a windows certificate authority?

Question

Digital certificates

There is AD, a certification authority. There is a zyxel access point that supports work via https. How to make a certificate for this point certified by a certificate authority?

Answer 1

First you need to decide which certificate template you will use. By default, there are few of them, the Web Server template may be useful
1. Create a certificate request (CSR). If Zukhel itself does not allow you to do this, use third-party software, the Windows CA allows you to create a CSR for a very narrow range of objects. CSR can be generated via openssl, which also works in Windows. There are also screw GUI generators, such as Crypto4PKI .
2. The received request - and this is a text file - is transferred to the Windows CA. How to transfer? I usually go to the web face of the CA, I choose. item Request certificate , then Advanced certificate request, insert the CSR text into the form window, select the template below.
3. Open the certificate snap-in and upload the received certificate or download it via the web interface. The certificate for the device usually does not require approval by the CA administrator.
Then it depends on what Zuhel takes. If separately the certificate and a key - give it the certificate and a key. If PKCS # 12, then through the same Crypto4PKI or openssl pack the certificate, key and certificate of your CA in PKCS # 12 and give it to Zuhel.