HTTPS Certificate

Create Certificate Template for HTTPS Binding

1. Connect to the Certification Server of your Company. If you don't have any CA on your domain You should get suitable https certificate from Enterprise CA or you should create self sign certificate that not recommended.

2. Open the Certification Authority screen and go to the Certificate Templates area.

3. In the Certificate Authority window right click Certificate Templates node, select "Manage".

4. Find the Web Server template from the list, right-click on it and select Duplicate Template.

1. Make the following settings:

   1. General Tab: Fill the Display Name and Template Name fields,

   2. Request Handling: Select Allow private key to be exported option,

   3. In the Security tab, you must add users and/or computers that can request certificates, and the groups they belong to. In this example Domain Computers added to the list. You should add computer account of the ARKSSPR server. Give computer account enroll right and then click OK.

1. Click OK to save template and then Close Certificate Templates screen.

2. In the Certificate Authority window right click Certificate Templates node, point New then select "Certificate Template to Issue".

3. Select previously created template then click OK.

Request HTTPS Certificate

ARKSSPR is a web-based application. Agents installed on computers work by connecting to ARKSSPR web portal over HTTPS protocol.

1. To generate the certificate, certlm.msc is run on the ARKSSPR server.

1. Right click on Personnel, point to All Tasks, click Request New Certificate.

1. Click next on the Before You Begin screen

2. Click Next on the Select Certificate Enrollment Policy screen,

3. Select the HTTPS Certificate template created in the previous step. This certificate requests some information. This information is the URL address to access the ARKSSPR server. Click on the More Information link.

1. Subject Name and Alternative Name fields are filled in on the Subject screen.

   1. Common Name: Server URL address is entered and transferred to the right with the Add button.

   2. DNS: The server URL address is entered and transferred to the right with the Add button.

Create the certificate, Click OK

1. The Enroll button becomes active on the Request Certificates screen. By clicking this button, the certificate enrollment process is completed. Clicking Finish will end the wizard.