FAQs

This article provides instructions for generating a Certificate Signing Request (CSR) for E-Mail (or) S/MIME certificates using Microsoft Management Console (mmc).

Email Certificates are personal certificates and they are stored under the Current User\Personal store in a Windows computer. You can directly open the Current User Certificate store by executing "certmgr.msc" command from Run Menu. Please follow the steps given below to generate a new Certificate Signing Request for an E-Mail Certificate

1. Click on Windows Start menu > Run 
2. On the 'Run' dialog box, enter "certmgr.msc" and press "Ok" - This will open up the Current User Certificate snap-in on an MMC.
3. On the Certificate Manager snap-in, right-click on the Personal folder.
4. Select All Tasks > Advanced Operations > Create Custom Request. This will open up the 'Certificate Enrollment'' Wizard. 
5.  On the 'Certificate Enrollment' wizard, Click Next on 'Before You Begin' page.
6. On the next page, select the option 'Proceed without enrollment policy' and click Next.
7. On the Custom Request page, select '(no template)Legacy Key' as 'Template' option and select 'PKCS#10' as 'Request Format' and then click Next.
    
8. On the 'Certificate Information' page,  expand the 'Details' drop down and click 'Properties' to bring up 'Certificate Properties' page. 
9. On the 'General' tab of the 'Certificate Properties' page, enter a Friendly Name for your certificate.
10. On the Subject tab, you can enter the Subject Details that can be included on the CSR. The Subject details can be the 'Common Name', 'Organization Name', 'State', 'City', 'Country' and 'Email'. Please note, the Certificate Subject may not include all the given values on this certificate request. It depends upon the certificate type you purchase from  Sectigo. 
11.  
12. After Updating the 'Subject', open the Private Key tab to set the 'Key Options'. Make sure that you set the Key Size to 2048 (or) 4096 and enable 'Mark private key as exportable' check box.
    
13. After finishing the configuration, you will get a page where you can save the CSR file. Select a location to save the CSR file. Enter a name for the file and click Finish.
    
14. You can then submit the CSR through your Sectigo client portal to complete the certificate request.