1: Generate CSR. It will be required in step 3.
2: Right-click Start | select Windows PowerShell (Admin) to launch PowerShell as administrator.
3: Execute the following certreq command:
certreq -submit -attrib "CertificateTemplate:CertificateTemplateName" CSRFileName.req CertFileName.cerCertificateTemplateName
Substitute with the appropriate Certificate Template name. This is the name of the certificate template without any spaces. You can find it on the CA server by launching the Certificate Templates MMC snap-in or by running certtmpl.msc via the command prompt or PowerShell. For example, use “WebServer”. If you are unsure, consult with a PKI administrator.
CSRFileName
Substitute with the appropriate CSR file name. This is the name of the Certificate Signing Request (CSR) file generated in step 1.
CertFileName
This is the name of the resulting certificate file created by the certreq command. If you cannot locate this file after executing the certreq command, check the c:\windows\system32 directory, as it is likely the current working directory.