You can use the Certificates snap-in to request certificates. You can request any type of certificate that has been preconfigured and made available by an administrator of the certification authority (CA) that will process the certificate request.

Users or local Administrators is the minimum group membership required to complete this procedure. Review the details in "Additional considerations" in this topic.

Additional considerations

• User certificates can be managed by the user or by an administrator. Certificates issued to a computer or service can only be managed by an administrator or user who has been given the appropriate permissions.
  
  
• To open the Certificates snap-in, see Add the Certificates Snap-in to an MMC.
  
  
• You can use this procedure to request certificates from an enterprise CA only. To request certificates from a stand-alone CA, you need to request certificates by using Web pages. The Web page for a Windows-based CA is located at http://servername/certsrv, where servername is the name of the server hosting the CA.
  
  
• If the requested certificate type requires approval before it is issued, you need to retrieve the completed certificate via Web pages.
  
  
• In order to request a Digital Signature Standard (DSS) certificate from an enterprise CA, you must select the User Signature Only certificate template in the Certificate Request Wizard.
  
  

Additional references

• Subject Names
  
  
• Certificate Extensions
  
  
• Cryptographic Service Providers
  
  
• Guidelines for Using Alternate Signature Formats
  
  

⇒⇒Certificate Manager "certmgr.msc" Manual