Using Microsoft Certificates with HP-UX IPSec A.02.01

Figure 5 Certificate Pending Page
Using the certreq Command to Submit the CSR
As an alternative to the web-based Microsoft Certificate Services utility, you can use the Windows
certreq command to submit the CSR, as described in the following procedure:
1. Copy the CSR file to the CA system if you have not already done so. On the CA system,
enter the following command at the Windows command prompt:
certreq csr_filename
Where csr_filename is the name of the CSR file. For example:
C:\> certreq c:\foo2.csr
2. The certreq utility opens a Select Certification Authority window, as shown in Figure 6 .
In this example, the CA name is IPSecMSCA (IP Security Microsoft CA) and the name of
the computer hosting the CA has been obscured. Click on the CA you want to use, then click
OK.
Figure 6 Select Certification Authority Window
3. The certreq utility displays a message with the request ID. Record this ID; the CA
administrator will need it to approve the request. In the following example, the request ID
is 44:
RequestID: 44 Certificate request is pending: Taken Un Submission
(0)
Step 3: Approving the CSR
This section describes two methods for approving the CSR:
Configuring a Certificate for an HP-UX Client 13