...
- https://cert-manager.com/customer/InCommon?locale=en
- Go to the Certificates tab; Click on Add
- Manual create of CSR
- Paste the CSR that was generate in the file from the previous step
- Verify information is correct
- Certificate Type: InCommon SSL (SHA-2)
- Certificate Term: 2 years (currently this is the longest period of time but choose longer if available)
- Server Software: This may change but if generated in IIS then choose Microsoft IIS 5.x and later. This is specific to where the cert will be used
- Next; Decide if the cert should be auto renewed; Ok
- Find the Cert you just created in the list, selected it and Approve.
- Once approved, selected it and click on Details
- Download the Cert:
X509 Base64PKCS#7, PEM encoded
Installing the Cert
- Go back to MMC → Personal → Certificates
- Right click, All tasks → Import...
- Browse to the cert file you downloaded from InCommon
- Place all certificates in the following store: Personal
- Finish
...