Home / server / Questions / 852822
In Process
Cat Mucius
Asked: 2017-05-30 06:11:55 +0800 CST

Enroll on-behalf-of certificate using existing CSR file

  • 772

Good day,

  • I have a CSR (certificate signing request) file, which was generated on some remote non-domain station.
  • I have created some AD user account.
  • I have Enrollment Agent certificate signed for my own account.

The question is: can I somehow submit this CSR to an Enterprise CA for signing on behalf of this user account? Preferably from command line (but not necessary)?

Different pages I found on this topic only demonstrated, how to create fresh new CSR on behalf of domain user (using .inf file), and then submit it to CA (example). But can I do it with existing CSR, not created by myself?

active-directory

0 Answers