Requesting and installing a new certificate for mutual authentication

HOWTO63646
Last Updated December 16, 2011
Copy Article Title/URL
Feedback
Subscribe

Requesting and installing a new certificate for mutual authentication

Now you must request a new certificate from your local online CA, based on the template that you created.

Note:

In case of a default Out of Band Management Component installation, perform this procedure on the Notification Server computer. If you installed the Out of Band site server on a computer other than Notification Server, you must perform this procedure on the Notification Server computer and on each of the Out of Band site server computers.

You can create the certificate manually, or you can use the Certificate Enrollment task to automatically request and install the certificate.

See Creating and installing a client certificate using an Enterprise CA.

To request and install the certificate with a task

  1. In the Symantec Management Console, on the Manage menu, click Jobs and Tasks.

  2. In the left pane, expand Samples > Remote Management > Intel SCS Tasks and Jobs > Certificate Enrollment.

  3. Under Certificate enrollment settings, click Manually define all parameters.

  4. Browse to your CA and the template that you created (AMTMutual).

  5. Click Save changes.

  6. Run this task on the Notification Server computer and on each of the OOB site server computers in your environment.

    The new mutual authentication certificate is created and installed into the current user certificate store.

To request and install the certificate manually

  1. Log on to the Notification Server computer (or the Out of Band site server computer) using the Notification Server's Application Identity account.

  2. In the Internet Explorer, open the Certificate Services Web page of your CA (http://<ca_server_name>/certsrv/).

  3. Click Request a certificate.

  4. Click advanced certificate request.

  5. Click Create and submit a request to this CA.

  6. In the Certificate Template drop-down list, click the template that you created (AMT Mutual).

  7. In the Name box, type the FQDN (for example, computername.mydomain.com) of the Notification Server computer (or the Out of Band site server, depending on to which computer you are logged on ).

    Warning:

    Do not type the CNAME alias, such as provisionserver.mydomain.com. Type the name that is registered in the DNS.

  8. (Optional) Fill in the email, company, city, state, and country boxes with your company's data.

  9. Under Key Options, type 1024 in the Key Size box.

  10. Check Mark keys as exportable.

  11. Under Additional Options, click PKCS10.

  12. Click Submit.

  13. Click Install this certificate.

    The new mutual authentication certificate is created and installed into the current user certificate store.

Imported Document ID: HOWTO63646
Legacy ID: v12536416_v66561089

Thanks for your feedback. Let us know if you have additional comments below. (requires login)

    © 1995-2019 Symantec Corporation