How to request an Online Responder certificate in Active Directory Certificate Services

Home > Search > How-to

To request an OCSP certificate:

  1. Select the Windows Start icon, type MMC  in Run, and select OK.
  2. In the console, press Ctrl + M (or select File > Add /Remove Snap In).
  3. In the left panel, select CertificatesAdd, and select OK.
  4. In the left panel, expand Certificates, expand Personal.
  5. Right-click on Certificates and select All Tasks > Request New Certificate.
  6. At Before You Begin, select Next.
  7. At Select Certificate Enrollment Policy, select Next.
  8. At Request Certificates, tick the OCSP certificate and select Enroll.
  9. When status Succeeded is displayed, select Finish.


The OCSP certificate should be listed.


Give the network service permission to the OCSP certificate.

  1. Right-click on the OCSP certificate, select All Tasks > Manage Private Keys.
  2. Select Add.
  3. Type Network Service, select Check Names, and select OK.
  4. Select OK.

Add a Comment

We will never share your name or email with anyone. Enter your email if you would like to be notified when we respond to your comment.

Please enter in the box below so that we can be sure you are a human.