> # Requesting an Identity Certificate

> To request an identify certificate from a Microsoft Certificate server using a PKCS#10 certificate signing request (CRS), follow these steps:

> 1. Click the Request an identity certificate radio button on the Microsoft Certificate Services web interface and click Next.
> 2. Click the Advanced Request radio button and click Next.

> 3. Click the Submit a certificate request using a base64 encoded PKCS#10 file or a renewal request using a base64 encoded PKCS#7 file radio button and click Next.

> 4. Paste the base64 PKCS#10 certificate request in the Saved Request text box and click Next.

> The certificate request is copied from the MDS switch console (see the "Generating Certificate Requests" topic and "To configure certificates on an MDS switch, follow these steps:" topic).

> 5. Wait one or two days until the certificate is issued by the CA administrator.
> 6. The CA administrator approves the certificate request.

> 7. Click the Check on a pending certificate radio button on the Microsoft Certificate Services web interface and click Next.
> 8. Select the certificate request you want to check and click Next.

> 9. Select Base 64 encoded and click the Download CA certificate link.
> 10. Click Open on the File Download dialog box.
> 11. Click the Details tab on the Certificate dialog and click the Copy to File button. Click the Base-64 encoded X.509 (.CER) radio button on the Certificate Export Wizard dialog box and click Next.

> 12. Enter the destination file name in the File name: text box on the Certificate Export Wizard dialog box, then click Next.
> 13. Click Finish.
> 14. Display the identity certificate in base64-encoded format using the Microsoft Windows type command.

> Copyright 2010-2015, Cisco Systems, Inc. All rights reserved.