.png?width=100&auto=webp&quality=80&disable=upscale "Picture of John Savill")
.png?width=400&auto=webp&quality=80&disable=upscale "John Savill")
Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
Custom SAN for Certificate
Request a certificate with custom Subject Alternate Names.
John Savill
November 11, 2013
1 Min Read
Q: How can I request a certificate from a Windows machine with Subject Alternate Names?
A: There are many services that use alternate names from the host name for communications, either for initial communications or ongoing. For example, work folders requires the server to authenticate when communicated to as workfolders., work place join requires the AD FS server to authenticate when communicated as enterpriseregistration., and there are many more. Fortunately this is easy to do.
First, ensure you have a certificate template available that machines or users can enroll with that is not configured with automatic subject name configuration. Then do the following:
Within the Certificates snap-in that has been configured with focus on the local Computer Account, select Personal certificates, and select the All Tasks - Request New Certificate... action.
Click Next to the enrollment wizard.
Ensure Active Directory Enrollment Policy is selected and click Next.
Select the certificate you want to leverage--for example, Web Server--and click the Details arrow and click Properties.
In the Subject tab select the Subject Name, then the required Alternative names as the screen shot shows.
Click OK, then click Enroll.
The new certificate will be available and can be configured to be used with HTTPS binding and other services.
About the Author
You May Also Like
.jpg?width=700&auto=webp&quality=80&disable=upscale)
