Using Microsoft Certificates with HP-UX IPSec A.02.01

• Using the Certification Authority GUI administration tool.
• Using the certutil command. This method is useful for approving multiple CSRs.
Using the Certification Authority GUI to Approve the CSR
On the CA system, use the following procedure to approve the CSR using the Certification
Authority :
1. If the Certification Authority administration tool is not already running, start it by clicking
Start→Administration Tools→Certification Authority.
2. In the left navigation pane of the Certification Authority window, click the icon for the CA
to open the folders below it. In Figure 7, the CA name is IPSecMSCA.
Click the Pending Requests folder.
Figure 7 Pending Requests
In the right pane, right click the icon for the appropriate request. In this example, the request
ID is 40. Click All Tasks→Issue, as shown in Figure 8:
Figure 8 Approving a Certificate Request
Using the certutil Command to Approve the CSR
As an alternative to the Certification Authority GUI, you can use the certutil command to
approve the CSR. On the CA system, enter the following command at the Windows command
prompt:
certutil -resubmit request_id
Where request_id is the numeric request ID displayed when you submitted the CSR.
For example:
C:\> certutil -resubmit 44
Step 4: Exporting the Client Certificate
This section describes two methods for exporting the client certificate to a file:
• Using the Certification Authority GUI administration tool.
• Using the certreq command. This method is useful for exporting multiple CSRs.
14