5.2

3 Generate the CSR file.
For example: certreq -new request.inf certreq.txt
4 In a text editor, open the CSR file (such as certreq.txt) and copy the contents of the file, including the
beginning and ending tags.
For example:
-----BEGIN NEW CERTIFICATE REQUEST-----
MIID2jCCAsICAQAwazEWMBQGA1UEBhMNVW5pdGVkIFN0YXRlczELMAkGA1UECAwC
Q0ExEjAQBgNVBAcMCVBhbG8gQWx0bzEKMAgGA1UECgwBTzELMAkGA1UECwwCT1Ux
FzAVBgNVBAMMDm15LmNvbXBhbnkuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
. . .
. . .
L9nPYX76jeu5rwQfXLivSCea6nZiIOZYw8Dbn8dgwAqpJdzBbrwuM1TuSnx6bAK8
S52Tv0GxW58jUTtxFV+Roz8TE8wZDFB51jx+FmLs
-----END NEW CERTIFICATE REQUEST-----
5 Use the contents of the CSR file to submit a certificate request to the CA in accordance with the CA's
enrollment process.
a When you submit the request to a CA, the CA prompts you to select the type of server on which you
will install the certificate. Since View uses the Microsoft Certificates MMC to manage certificates,
select a certificate for a server type of Microsoft, Microsoft IIS 7, or something similar. The CA should
produce a certificate in the format needed to work with View.
b If you request a single server name certificate, use a name that the View server can resolve. The name
that computers use to connect to the View server should match the name associated with the
certificate.
After conducting some checks on your company, the CA signs your request, encrypts it with a private
key, and sends you a validated certificate.
The CA also sends you a root CA certificate and, if applicable, an intermediate CA certificate.
6 Rename the certificate text file to cert.cer.
Make sure that the file is located on the View server on which the certificate request was generated.
7 Rename the root CA and intermediate CA certificate files to root.cer and intermediate.cer.
Make sure that the files are located on the View server on which the certificate request was generated.
What to do next
Verify that the CSR file and its private key were stored in the Windows local computer certificate store.
Verify That the CSR and Its Private Key Are Stored in the Windows Certificate
Store
If you use the certreq utility to generate a CSR, the utility also generates an associated private key. The utility
stores the CSR and private key in the Windows local computer certificate store on the computer on which you
generated the CSR. You can confirm that the CSR and private key are properly stored by using the Microsoft
Management Console (MMC) Certificate snap-in.
The private key must later be joined with the signed certificate to enable the certificate to be properly imported
and used by a View server.
Prerequisites
n
Verify that you generated a CSR by using the certreq utility and requested a signed certificate from a CA.
See “Generate a CSR and Request a Signed Certificate from a CA,” on page 10.
Chapter 1 Obtaining SSL Certificates from a Certificate Authority
VMware, Inc. 11