1. I tried below link till step 20. but step 21 not able to do because Certificate Enrollment Requests option
is not there in mmc certificate console.
https://blogs.msdn.microsoft.com/mayurpatankar/2017/09/01/sha-256-self-signed-certificate-for-windows-server-2012-r2/
2.i tried to create ssl certificate with Ca server which part of domain but my client machine is in workgroup ussing " Certificates (Local
Computer) >>>Personal >>>>>Certificates >>>>>All
Tasks>>>>>Advanced
Operations>>>>>Create
Custom Request" after that i am running below command :
cetreq -adminforcemachine -config " ca server fqdn"\ca serevr name-CA" -submit c:\certificate path certificate
which generated ussing above link till 20 step. \
but here also getting rpc error (1722..win32)
checked port 135 its open from both side .
Kindly help on this.
My intention to remove rdp :3389 Vulnerability where existing certificate having sha1 and key size 1024 and install new ssl certificate with SHA256 with key size 4096 with self sighned or with the help of CAserver.
Note : in domain machine i am able to create ssl certificate with key size 4096 from CA server.
