Question

How to generate a smart card logon certificate with a Microsoft Active Directory Certificate Service?

Answer

Prerequisites

  • A smart card logon template must be available in the certificate template list 


Step-by-Step


  1. Open the Internet Explorer, enter the address to your Microsoft Active Directory Certificate Service in the address bar and press the enter key.



  2. On the start site click the link "Request a certificate".



  3. In the step "Request a Certificate" click the link "advanced certificate request".


  4. In the step "Advanced Certificate Request" click the link "Create and submit a request to this CA.".



  5. You get the message "Web Access Confirmation". Click "Yes".



  6. In "Advanced Certificate Request" under "Certificate Template" click right from the field the down arrow and select your Smartcard Logon template from the list.



  7. In "Advanced Certificate Request" under "Key Options" click right from the field "CSP" the down arrow and select "Microsoft Base Smart Card Crypto Provider" from the list.



  8. Next click the button "Submit >".



  9. The window "Windows Security" appears. Enter the User PIN from your cgToken and click "OK".



  10. You get the message "Web Access Confirmation". Click "Yes".


  11. In "Certificate Issued" click the link "Install this certificate".


  12. You should get the status "Your new certificate has been successfully installed.".

Was this answer helpful?

Please rate & help us to improve our FAQ.