Redirecting you to
Tech Document Sep 25, 2018

How to Generate Certificate Signing Request on MS Terminal Services (RDP)

This article will go into detail on how to generate certificate signing request on MS Terminal Services (RDP)

Save the following file as request.inf on your server editing the subject according to the comment:

;----------------- request.inf -----------------

Signature="$Windows NT$"

;Change to your,country code, company name and common name
Subject = "C=US, O=Example Co,"

KeySpec = 1
KeyLength = 2048
Exportable = TRUE
MachineKeySet = TRUE
SMIME = False
PrivateKeyArchive = FALSE
UserProtected = FALSE
UseExistingKeySet = FALSE
ProviderName = "Microsoft RSA SChannel Cryptographic Provider"
ProviderType = 12
RequestType = PKCS10
KeyUsage = 0xa0
HashAlgorithm = SHA256

OID= ; this is for Server Authentication / Token Signing

then run

C:\>certreq -new request.inf request.csr