Generating Certificate Signing Request
Before you can go ahead and request/purchase a vPro provisioning certificate, you need to ensure that you have a CSR, that’s your Certificate Signing Request. This is something that the certificate company like GoDaddy, Comodo, StarField or Verisign will ask of you before they can generate a vPro provisioning certificate for you. Now, this steps assumes you are running IIS 7.0 on a Windows Server 2008. To generate and CSR:
Click the Start menu and select Administrative Tools
Start Internet Services Manager and click the Server Name
In the center section, double click on the Server Certificates button
From the Actions menu click Create Certificate Request. This will open the Request Certificate wizard
Enter your Distinguished Name field information. The following characters cannot be used:
< > ~ ! @ # $ % ^ * / ( ) ?.
This includes commas.
Common Name = This must be your Fully Qualified Domain Name or FQDN of your provisioning server
Organization = The name of your company
Organizational Unit = In this field, you must only key in Intel(R) Client Setup Certificate. No other entries is acceptable for the vPro provisioning certificate.
City/locality = This is your city for informational purpose
State/province = This is your state for informational purpose
Country/region = This is a two letter country code. You may select from the drop down box. In my case, it is MY for Malaysia
SCCM supports the cryptographic bit length of the maximum of 2048 bits. 2048 is the recommended bit length.
Save the file in a location in your disk. And you’re done!
This is how the generated CSR file will look like. The contents of this file is the information that the certificate companies requires in order for them to generate a working vPro provisioning certificate for you.